Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29/09/2024, 15:03
Static task
static1
Behavioral task
behavioral1
Sample
fec6b7ff53367575f9193b6e66528b24_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fec6b7ff53367575f9193b6e66528b24_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fec6b7ff53367575f9193b6e66528b24_JaffaCakes118.exe
-
Size
36KB
-
MD5
fec6b7ff53367575f9193b6e66528b24
-
SHA1
974ab9710de26663ae29e35794aa2958b949e3d9
-
SHA256
3c89b0d0ba95c4ba6cc9d9daceef327dfb50b6bb4faa71047205c735b6793768
-
SHA512
4706e22b14f4b5d0a641d67736834ecbf28cd9b0f94f7e38605f0ebfd155ba53cd9821253f4b40fd9a4ab1c65048fb1bcc212fc4fdc52a205cb8dc6b55c5917d
-
SSDEEP
768:Eu4sP6TAh2pN04ZoN/5Uz06TAfVZWHITVkuw:EuBjb8HITVJw
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fec6b7ff53367575f9193b6e66528b24_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 232 fec6b7ff53367575f9193b6e66528b24_JaffaCakes118.exe 232 fec6b7ff53367575f9193b6e66528b24_JaffaCakes118.exe 232 fec6b7ff53367575f9193b6e66528b24_JaffaCakes118.exe