Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
9s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
01/10/2024, 08:43
Static task
static1
Behavioral task
behavioral1
Sample
0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe
-
Size
85KB
-
MD5
0517d98ffb180627a918a597c2bd256e
-
SHA1
6b67ee1c345174162cbfd49d5939a241e597f68d
-
SHA256
750855e9961f60ed33dd7aef7582b374ae34b9ad2cce2f5247a048608a30149b
-
SHA512
4741eb207fd617a9b42fdd995225e86d4e92c7ff0b8aed51f3ae5c06e85cb15533404391a77afc4dc08d3c003d85845e3fd2227fafc5062c7ac4713662235d00
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzgmE8PUlJww:lV2BZVPlFlnxClFvLLcA+sPDzgmxCJr
Malware Config
Signatures
-
Drops file in Windows directory 18 IoCs
description ioc Process File created C:\Windows\win32dc\UT2004(codes).exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File opened for modification C:\Windows\win32dc\DAoC_codes.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\Counter-Strike(fix).exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\FlatOut(fix).exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\Counter-Strike + trainer.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File opened for modification C:\Windows\win32dc\Counter-Strike + trainer.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\UT2004 serial.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File opened for modification C:\Windows\win32dc\UT2004(codes).exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File opened for modification C:\Windows\win32dc\Counter-Strike(fix).exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File opened for modification C:\Windows\win32dc\Counter-Strike(hack).exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\DAoC_cdfix.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\Half-Life 2(cdfix).exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\Counter-Strike(hack).exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\DAoC_codes.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File created C:\Windows\win32dc\Quake3 codes.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File opened for modification C:\Windows\win32dc\Quake3 codes.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File opened for modification C:\Windows\win32dc\DAoC_cdfix.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe File opened for modification C:\Windows\win32dc\UT2004 serial.exe 0517d98ffb180627a918a597c2bd256e_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
85KB
MD5327f236ef5196db100487f2a98d180cb
SHA15984791ca9a4254b2d0f061accdc1a59307b0e4a
SHA2563ee8f46a30abcc5d0b462a19233a287fc50addf95ebb8293935f2d5bf2978fb1
SHA5120a2195d7ee7808b1d7e2f0736d881e1b23d05c3991279d00c40a2fdfc78bb9b52f9ba88608a8c3fbf4dd14788fcac6096f70cf09fd047a2503108d350b9dcb1f