Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/09/2024, 21:33
Static task
static1
Behavioral task
behavioral1
Sample
fd2eab6df0732f747dabf2d6991e312c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fd2eab6df0732f747dabf2d6991e312c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd2eab6df0732f747dabf2d6991e312c_JaffaCakes118.exe
-
Size
164KB
-
MD5
fd2eab6df0732f747dabf2d6991e312c
-
SHA1
9a466c260317da3445a2df782963a480c0866030
-
SHA256
b4efdbd6875387c3679cc245a34d483f053eb324dc5fce0e8d9d756d221cac4c
-
SHA512
0507fdc77995f7bc5532a3ff205b1859457c336cda36a4ce64cf392c6861c141a5d26a36121542689d3be4305045077a4004c8d2784f2caf4b3ce17ee90d45cc
-
SSDEEP
3072:uKYDHMyZ/Z7FMYBqiQ3vKFkIq0levLsagNof1ae+e69H1cOOEHa:+HMyZxBVBqz3zj/vhshe7O1IEHa
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fd2eab6df0732f747dabf2d6991e312c_JaffaCakes118.exe