Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
26/08/2024, 07:25
Static task
static1
Behavioral task
behavioral1
Sample
c28802f0b84eb86bc9603400a7fb1733_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c28802f0b84eb86bc9603400a7fb1733_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c28802f0b84eb86bc9603400a7fb1733_JaffaCakes118.exe
-
Size
120KB
-
MD5
c28802f0b84eb86bc9603400a7fb1733
-
SHA1
4ed799da0c39b6e1ef16bd4addaa8a50334f672a
-
SHA256
e902a0aa6042777342d2864ca369537820a3f19abc0ecc027db83f99b38686f3
-
SHA512
68ee1efe727298b4457c94cce8cc367bc77e4d9c6d0eb1315d13dde80dbb78cc15df0305a2e92a906e8a5d442885dbded5502d7c9480a2af5cc1b280845a0063
-
SSDEEP
3072:7DWKDq7lYzH8Xx7RyOIe4bEv7rNCfoF+Xx2Vwgo4i:FqlYmx7ktqrNCfO+Gwgof
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 820 1036 WerFault.exe 83 -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c28802f0b84eb86bc9603400a7fb1733_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c28802f0b84eb86bc9603400a7fb1733_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c28802f0b84eb86bc9603400a7fb1733_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1036 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1036 -s 2242⤵
- Program crash
PID:820
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1036 -ip 10361⤵PID:2792