Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14/09/2024, 10:06
Static task
static1
Behavioral task
behavioral1
Sample
dff87687f44856943f918d9851ca26e3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dff87687f44856943f918d9851ca26e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dff87687f44856943f918d9851ca26e3_JaffaCakes118.exe
-
Size
32KB
-
MD5
dff87687f44856943f918d9851ca26e3
-
SHA1
371f4a386a75ae1bf72d63c83e857c0d5277140d
-
SHA256
9dbe88ae099d10d994d0bb47ea4e067e846ae6b4b1bc3afc65bed1561f65be65
-
SHA512
14fbb75da36d5e6cfd65879731d143c5e21e305789fc7bd55137ed605d2f33b9be0f7cb44d6fa77f9dda285989cb27513477da0076c9489f255c807bcb8212bc
-
SSDEEP
384:tPjAvEQAHnM0YcGEOo5+KkyJpB6yJ8uZLVkwC8A1c46rPZenVw8VsOb18hN3:VM0YcGEjspGnXy/8e6AnVw8VsOR6
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3533259084-2542256011-65585152-1000\Software\Microsoft\Windows\CurrentVersion\Run\4a4843575d445109425f42 = "C:\\Users\\Admin\\pzcv.exe" dff87687f44856943f918d9851ca26e3_JaffaCakes118.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 1884 dff87687f44856943f918d9851ca26e3_JaffaCakes118.exe