Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07/09/2024, 20:37
Static task
static1
Behavioral task
behavioral1
Sample
d2cab48cde64db06fef53d03f64e912a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2cab48cde64db06fef53d03f64e912a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2cab48cde64db06fef53d03f64e912a_JaffaCakes118.exe
-
Size
71KB
-
MD5
d2cab48cde64db06fef53d03f64e912a
-
SHA1
cde9c0773940ffaec13d82ca6a492b3563f68333
-
SHA256
c46afbce8d21719953c0afa6b7fa1eb7c5585c2fe712691d2cf2e70914251ebf
-
SHA512
fd0a628bc51fadd77a0d093624d2375002bd90ba16fd20555b076a5d66cffcc802ed283b02a0ecc0ea50f875bfd92c8024c76b840628d31ba2f2f44bd6621c3c
-
SSDEEP
1536:IMYg8/a9fU3jqmN34fLQh4/fM5eFZDsM0:IBKfJuhQJ34
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d2cab48cde64db06fef53d03f64e912a_JaffaCakes118.exe