Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2024, 14:50
Static task
static1
Behavioral task
behavioral1
Sample
c83aa75b6da8e4db7ebb4193e89b0597_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
c83aa75b6da8e4db7ebb4193e89b0597_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
c83aa75b6da8e4db7ebb4193e89b0597_JaffaCakes118.exe
-
Size
320KB
-
MD5
c83aa75b6da8e4db7ebb4193e89b0597
-
SHA1
7fab7517b16541bae814e6c886d43c04714ef79f
-
SHA256
af8585062c8c08555c4d533943f41d3daa9e7f31417e5d15340272a93055b3bf
-
SHA512
0f78976d58133be23ae5596a52b1076be53849c7ec3951bb0efa911a87814c880a25743fa54ca0818b0f6ac3fe54fccf2291e80107aab576a29a06ef6fa1d235
-
SSDEEP
6144:F1Cyk4qmzAsm4bv7e88hEGSPHcdaOUbdtAFCP33DBwDM:CN92Xe8Sq+aPbnBvf
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c83aa75b6da8e4db7ebb4193e89b0597_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1848 c83aa75b6da8e4db7ebb4193e89b0597_JaffaCakes118.exe