Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19/01/2025, 20:20
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d23262938f92e3b274f2ed4eecffc25e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d23262938f92e3b274f2ed4eecffc25e.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d23262938f92e3b274f2ed4eecffc25e.exe
-
Size
248KB
-
MD5
d23262938f92e3b274f2ed4eecffc25e
-
SHA1
0bfc8ca0e6b48039fefbeabc200cfd2611732c22
-
SHA256
131f22f818130dfe0b44b9fd75f0e470f9dedb88d7c7cd6739249b7087f47244
-
SHA512
ceb56fff12d994012831696a4827dcea649ce1c1f78862a985e607672c865197e6457ad564bb5ae299e505a9c6d45fff0e0efb617246ea69820caacc283723bc
-
SSDEEP
6144:MrtCIyoJ5PUCdMt4iZKOeKWq2ZMNh1sBwwg2ZMPh0z:ozyoLFdaeK/wvhgIMPhE
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_d23262938f92e3b274f2ed4eecffc25e.exe