Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
07/09/2024, 14:29
Static task
static1
Behavioral task
behavioral1
Sample
d2267b9bbd65749777bf114bcad62c64_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2267b9bbd65749777bf114bcad62c64_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2267b9bbd65749777bf114bcad62c64_JaffaCakes118.exe
-
Size
126KB
-
MD5
d2267b9bbd65749777bf114bcad62c64
-
SHA1
a4a7899b87ce2295f68bee63aa621e0ff1cca131
-
SHA256
1d08ef18b0951e4e5fd671616d4bae4ed1c0af324cc6e18316b4fd2b57074957
-
SHA512
192b0905557fbe78ae9df218c1f4dda1a43aead0f31709eecefad19dd4aecb0452a5818a252831f20b19ba8f0c9b1117a2df85c8910777e2e264ed5af37deed7
-
SSDEEP
3072:lZamXVX7wJ1gmc7RauDYSaLbGb+1F2q1+7ikfPa7qeXrIyU6V:75ryt+aCQbyS2q1+7vfS7RrIyU6V
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2220 d2267b9bbd65749777bf114bcad62c64_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d2267b9bbd65749777bf114bcad62c64_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822