Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25/09/2024, 08:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe
-
Size
4.5MB
-
MD5
f5a6c4cc4a55f6b417222056abcf2bf4
-
SHA1
7e42aa4e15460b7a68f401f9a6cdf270c1ce10b5
-
SHA256
64c5aed5f4bc636d4bbe4a6d04ede6a646cf04012a79aee4ce8a13451d80fc21
-
SHA512
c1947055f3cd358980c3c76de6bd4f82e63240c2da8a35b8660d62e98083a28c2e667f8cf118f29d84dea3c9339a6a62c6d731eae970bfc428a9f10ac4f78d11
-
SSDEEP
768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4n:tjrAX5NjJHJ+oFE2M/4n
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\GBAEmu.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Sexo con una menor.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinZip 9.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Touch.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\BsPlayer v3.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\WAV2MP3.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Solo para Maricas.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\mugen (full).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\a pelo.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Chenoa en cueros.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\GameCube Emulator.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\No lo Descargues.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Basic 6.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Movie Maker.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Silent Hill.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\PSEmu.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAmp skings and plugins.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\RealOne Player (Full version).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Studio (full).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\VMIntel386.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Puta come mierda.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Hacha Profesional Edition.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual C.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Download.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\humor.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\RM2GBA.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f5a6c4cc4a55f6b417222056abcf2bf4_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:4388
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.3MB
MD5ecce9a11fd955327da8eee6b7971ea14
SHA153686a49a6101d16a8b40046aa68e18ebb478bd9
SHA256636d51f21692b4ff32b69fd3f0bc0b9913261e1aee96e5de962b0d10b619a0ac
SHA5120d399b114a91017018a2cb5e4dc951a302bafd4f64737193d30c03a9a23fcae2151bc366281cbaa619599a1f29172041f069128c5ed2fcf38be9a430bdde00d1