Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/09/2024, 06:45
Static task
static1
Behavioral task
behavioral1
Sample
d9cf57a7c2e8430bd4224d594d6af42d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d9cf57a7c2e8430bd4224d594d6af42d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9cf57a7c2e8430bd4224d594d6af42d_JaffaCakes118.exe
-
Size
332KB
-
MD5
d9cf57a7c2e8430bd4224d594d6af42d
-
SHA1
49e4045518eaf43993e20417c957f6a46e9e7b02
-
SHA256
ba251654fa02a35fd14bdf741e3e9bb6e16b19ef66a4ad9c8220a18598b05fcb
-
SHA512
7f49c0fcc2de5aa845866b9ccc79d192276c0de2e35e703fd3b248ffb543571cfd58d3fa7912e638da8d346fa10a3752e41a1eacf1e9fcddf3e38fdf7c7a3695
-
SSDEEP
6144:/Y5Ix+fkSpcmwSUjT9jCu9UOem7HQKoZufpU:/YP7pdwSK9Z9/xEZopU
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d9cf57a7c2e8430bd4224d594d6af42d_JaffaCakes118.exe