Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
06/09/2024, 07:03
Static task
static1
Behavioral task
behavioral1
Sample
cef367cfd4bd58ec1d534c244638d339_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cef367cfd4bd58ec1d534c244638d339_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cef367cfd4bd58ec1d534c244638d339_JaffaCakes118.exe
-
Size
47KB
-
MD5
cef367cfd4bd58ec1d534c244638d339
-
SHA1
e4e9d52e9882f6907a6acb9541d3d5d730f73aa5
-
SHA256
40edc7d2c43eee23274cd4a52fe22c7206c1ec9bba9b2edfcaa1de9453b13d2d
-
SHA512
5aabbfac24aa900a7f6a9ae526098b66c793b799b1e3d4fc9b881b894a809647851c4f3878072a5ff1534dc559233451593811e162ba957ff378d45e1d4591fb
-
SSDEEP
768:hWf5pMNKfvRLTee8a+CtHeGh0bvA5JUEl6i27PZM4R5txNYRrKK6RZXb:haaKHRLT6T6eGFJUEM2o8RrKK63Xb
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cef367cfd4bd58ec1d534c244638d339_JaffaCakes118.exe