Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
09/09/2024, 02:59
Static task
static1
Behavioral task
behavioral1
Sample
d58d0de6734b2e5f463491e38263c223_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d58d0de6734b2e5f463491e38263c223_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d58d0de6734b2e5f463491e38263c223_JaffaCakes118.exe
-
Size
616KB
-
MD5
d58d0de6734b2e5f463491e38263c223
-
SHA1
c64664e6141369e515b896c7ef5f4c8766871a0e
-
SHA256
279650c2ebecc8093f637fbaf298e913b6ad761c1396d596c3e640e736d83254
-
SHA512
845ce1cca08b01338edd6ce81c4a0691a217e28212baaff5005e9a983bf6cb7e6d241b724ac8972220a6e2aaa2503d75db6ffcc8bd1fee5cbf71d8a1cc0516cc
-
SSDEEP
12288:mzjS41vBWdq4iKMflnkXgUVLqTWAQkNO5q57+Kl9KtVCX+fE1:GS4qqnXn+lWTduw98VCX3
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d58d0de6734b2e5f463491e38263c223_JaffaCakes118.exe