Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2024, 13:11
Static task
static1
Behavioral task
behavioral1
Sample
42800d6e58afa01acb3da367889657fa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42800d6e58afa01acb3da367889657fa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42800d6e58afa01acb3da367889657fa_JaffaCakes118.exe
-
Size
616KB
-
MD5
42800d6e58afa01acb3da367889657fa
-
SHA1
aa78d4be8f850a94b9bf3e8eb0d40ab144f64db3
-
SHA256
19b2bb72fc200ad67fa6850d84b1290ed3cbb624934b93fedb2b2eccd120a399
-
SHA512
5e4d177dec9928a8a83c5586c1c4d2a31b69bf3ec1bdf9b923d5af5a23795e284ec77cc28dbe57aec2c15fea87ca12dd29ebe0fa94b430e8f29e06029bfab3de
-
SSDEEP
12288:4wAMmytywu3xgBQXDYxR1oUpF0wNKyLMbqcorAvcEzbAohW6TZ5Q:4qbuKTDGwXM2cmSbhLQ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 42800d6e58afa01acb3da367889657fa_JaffaCakes118.exe