Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
07/04/2024, 23:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe
-
Size
5KB
-
MD5
e61866162c18fa984730aceb2c9601f5
-
SHA1
7f420d8e77155a53f6c65a37446b6f472eba4d58
-
SHA256
c610c1d543f43e3502411f32ed9f7f406474041a996371c0d1e12f35adda6565
-
SHA512
661e98c650ce93c179aafbb8a21d59f8091990586983a28356e3ac420ace197a984849f6728d321c12ed4a0e4c805cea4610437f61ce812c651c2b413f754658
-
SSDEEP
96:Z1DrSJKS7VXBSW57DOpIiSe/6tOeY8mxmu2y5lMA:3rNwVRS8aG/eCFuL5lMA
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe -
Program crash 1 IoCs
pid pid_target Process procid_target 1664 4992 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e61866162c18fa984730aceb2c9601f5_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
PID:4992 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4992 -s 3682⤵
- Program crash
PID:1664
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4992 -ip 49921⤵PID:1572