Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2024, 09:11
Static task
static1
Behavioral task
behavioral1
Sample
2e7b91069d8968b095242e82a8c43c66_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e7b91069d8968b095242e82a8c43c66_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e7b91069d8968b095242e82a8c43c66_JaffaCakes118.exe
-
Size
352KB
-
MD5
2e7b91069d8968b095242e82a8c43c66
-
SHA1
90a86f5615fcfdf37f3542db00a943f2a0bee116
-
SHA256
77f1726c08d94f0a220ceb5c0735c03c8424c1a1876137cdbdbf29362311af66
-
SHA512
70d6a6d3380a4b40fb0a6c4865bcb38b1faa776bb74322e6b47893720fae5815a397e917d6f40210517f3761960a1eba603566c6477da3f08b581018ff54bd6d
-
SSDEEP
6144:BAeIifU8j6Hd4L9UMlqcDONoIkUTZ5oZGdzVEkQ+lrRBlWym7D:BRFj6Hd4LSMlqPNoIkCo4EkQilyD
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2e7b91069d8968b095242e82a8c43c66_JaffaCakes118.exe