Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    93s
  • max time network
    113s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/04/2024, 06:46

General

  • Target

    f2ec23732796530ae6ab7b71357e5550_JaffaCakes118.exe

  • Size

    293KB

  • MD5

    f2ec23732796530ae6ab7b71357e5550

  • SHA1

    3275fc6dd4af1e597c15f46c64e64910460538ca

  • SHA256

    0059fac9bbf909f05455ffd5353f17c68984459da73c78a913b68deb0e969037

  • SHA512

    31d2cdebc35fb5d0b8f2e4d47de177d87f726e0b5cf162bb4a0b9a77ada96a9ba540e297235a3cf5ee0d5e43d33dc1131deec233005634fc3e063517d4df6e97

  • SSDEEP

    6144:2PdMcMANEVzGlcEDUl4qaRYVQ4JTGbusJRhgnGXcaD7Xm2BeddhMHJuVMB:SNEh8cSLqd7sisDhgnGpBBedDMpuVM

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f2ec23732796530ae6ab7b71357e5550_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f2ec23732796530ae6ab7b71357e5550_JaffaCakes118.exe"
    1⤵
      PID:3764
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3764 -s 408
        2⤵
        • Program crash
        PID:1436
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3764 -ip 3764
      1⤵
        PID:4664

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads