Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
18/10/2024, 07:11
Static task
static1
Behavioral task
behavioral1
Sample
561ab316b18a5db25d7ef4042aae9665_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
561ab316b18a5db25d7ef4042aae9665_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
561ab316b18a5db25d7ef4042aae9665_JaffaCakes118.exe
-
Size
65KB
-
MD5
561ab316b18a5db25d7ef4042aae9665
-
SHA1
fde11c16ac54f1876514999d7035e26fa127343f
-
SHA256
a0b91dbefb0919c0817993aa4dcf88d88725a884b33bd3ec4da9994d3e0b88e9
-
SHA512
a4fde07cfd86caeeacbdfb7a0aa275ecbec4fe49a21fefab1b01799289cd5676ff684a4be6b8cfd699a39fa24963ef97f9da5d95a221630ad8717973ddd6e709
-
SSDEEP
1536:ywZQBe7upvvS6L3wdeKlIL5K33T2XY20k:yAQBe7upvK2s5lIsHTYx0k
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 561ab316b18a5db25d7ef4042aae9665_JaffaCakes118.exe