Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
27/01/2025, 16:58
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_41ca75c550098246251b4309e918d6fe.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_41ca75c550098246251b4309e918d6fe.exe
-
Size
542KB
-
MD5
41ca75c550098246251b4309e918d6fe
-
SHA1
95f3da4a2375a7377d5232a5361284c02039f39e
-
SHA256
10554d88a00779feeb408ddf9d3fb889d9929074be46120a9d9e3d6256bc2d34
-
SHA512
a283de7c8c01518e07d233a2a3751c82db9754ee78fe83e0d061b37350997e3684a6181e5fa2f00b8d4804dc04398fd6353facb855e1c25c3c962662cf2d193a
-
SSDEEP
12288:KyXYk2KShNsrkzyo47oQN6CDK1NpjocYZYamBoyXKU:KS2Jyo7QNzG7q3IB/aU
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_41ca75c550098246251b4309e918d6fe.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2268 JaffaCakes118_41ca75c550098246251b4309e918d6fe.exe