Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
11/09/2024, 16:46
Static task
static1
Behavioral task
behavioral1
Sample
daca0f73424c32e61c90804239229bcc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
daca0f73424c32e61c90804239229bcc_JaffaCakes118.exe
-
Size
75KB
-
MD5
daca0f73424c32e61c90804239229bcc
-
SHA1
4ed3fcb319ffefb86c514378305dfebc1c6ac78d
-
SHA256
ac887c395a23d01f6249bd20ede5c3c3d3dbd925b531f8425386621e1e372a5a
-
SHA512
c65f2259f206381d0eb32a77291e92c590981c5ae01440d830187285d9d8d20cbf58c2b8ae1a93e0811e13202ac9d82e1585f593b0cea3c89de2e3b6bd4b0264
-
SSDEEP
1536:RDnqAaop+uFGVoRYSONLlWRloHfN8uW2YY8zwSiR5IwIwBIEY5qXXv:RDqobGVR0idtYpzmvIFLIXXv
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1480-1-0x0000000000400000-0x000000000042E000-memory.dmp upx behavioral1/memory/1480-2-0x0000000000400000-0x000000000042E000-memory.dmp upx behavioral1/memory/1480-4-0x0000000000400000-0x000000000042E000-memory.dmp upx behavioral1/memory/1480-6-0x0000000000400000-0x000000000042E000-memory.dmp upx behavioral1/memory/1480-7-0x0000000000400000-0x000000000042E000-memory.dmp upx behavioral1/memory/1480-15-0x0000000000400000-0x000000000042E000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language daca0f73424c32e61c90804239229bcc_JaffaCakes118.exe