Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06/09/2024, 15:41
General
-
Target
cfe0bfd065d2f723138df908ba6b82b4_JaffaCakes118.exe
-
Size
44KB
-
MD5
cfe0bfd065d2f723138df908ba6b82b4
-
SHA1
8c1a5ef83f14fa8c81cf252645b4ceb798db89aa
-
SHA256
5c3628d27c72f3dbaef9e220e3f59f30e45bdf8276c4ee30e737d8436b542db5
-
SHA512
033f95e018fcf9b3be7ce5961d54ec8d01f28fa0df9b8062ae29973d3a5f7ec389d72e5fcadde3d4507afa93ecc21103cd2c2fba6f0ea3a5a825192e005e04ea
-
SSDEEP
768:TEGOBqI5XzDaYki67Cpj747aI0AV9iDiUANzrOYAgpp+JQ/JRe:CjmJdeja7yDx0fpGwe
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cfe0bfd065d2f723138df908ba6b82b4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\cfe0bfd065d2f723138df908ba6b82b4_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx