Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
17/10/2024, 19:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe
-
Size
976KB
-
MD5
53710d7bfe327e98fc696fc2a39ff2bc
-
SHA1
1135b2bdd2b75f10e9e41c0aaa20907279055c7f
-
SHA256
a7b7bfd20e230cec8ae92c118b0ca0ff89850309d8f17b650d723485240ae955
-
SHA512
bd208c2e2feed20c779a8b1fa4d5174fc66a9ffdc9adf037f045fc5685c1db604168d25d737f9a55542c532ef3d772c66f220ab7af12f3219975f883dcc29389
-
SSDEEP
768:t7iEg1+NidXmlP2YAaenXQ3WMpbViFq4/4U:t7j752oenXTMpZcq4/4U
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\GameCube Emulator.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Sexo con una menor.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Chenoa en cueros.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAmp skings and plugins.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\mugen (full).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\a pelo.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\VMIntel386.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Solo para Maricas.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\humor.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Touch.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\GBAEmu.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Basic 6.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\PSEmu.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\RealOne Player (Full version).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\RM2GBA.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\WAV2MP3.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Puta come mierda.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\BsPlayer v3.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Silent Hill.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Studio (full).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Download.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual C.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\WinZip 9.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Hacha Profesional Edition.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Movie Maker.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe File created C:\Windows\Intelx386\No lo Descargues.exe 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\53710d7bfe327e98fc696fc2a39ff2bc_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:2616
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
MD54dba231c3685e4b292b5100fe2199f9f
SHA18bc6b139d769a31af3933579ced6960c9b34637a
SHA256bdf3ac8dca2f10e45e19c3ea0afd3eae49481f28fa0b1e835ca7d22d7066f4f6
SHA512273ba8d45ef9bb0f65a7cb8816487fe3315619ea0522fd3f02c8872cce4bde766924ad323a3ba9411a0fa8c7b15af0d1814e8f7ba0a0b0bcec6fe37ec85fe4de