Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
12/09/2024, 00:37
Static task
static1
Behavioral task
behavioral1
Sample
db81aa2a3dbb9ab6f2f8e67b9f21baf5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db81aa2a3dbb9ab6f2f8e67b9f21baf5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db81aa2a3dbb9ab6f2f8e67b9f21baf5_JaffaCakes118.exe
-
Size
76KB
-
MD5
db81aa2a3dbb9ab6f2f8e67b9f21baf5
-
SHA1
0808f804661c1058678748dad4041617bd0320df
-
SHA256
9c138569a8a59ad5fe40d8f3e53cbfa48acecd428413b118310118ff5bf791b7
-
SHA512
62409b53231f0ca78e1e6c23c2ba5f3ad6e6fde08850a8f095b8c561a2151d4a0b3be3558fb93c5b5f8239a087bb9a73f891c411a71d09d9a16852f6528a29b1
-
SSDEEP
1536:TbzI2qyjPLoj3X6VDFYdlqo4wtvZm+2aa6c6I/Io7KTCWD3da0rlUz:GyjPLoj3X6VQqo4wFEFI3tM
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Windows\CurrentVersion\Run\9c9e9595859b96df948994 = "C:\\Users\\Admin\\AppData\\Roaming\\dtjg.exe" db81aa2a3dbb9ab6f2f8e67b9f21baf5_JaffaCakes118.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2492 db81aa2a3dbb9ab6f2f8e67b9f21baf5_JaffaCakes118.exe