Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 13:17

General

  • Target

    f5dc6f002c8fe753519832b30690ea88_JaffaCakes118.exe

  • Size

    20KB

  • MD5

    f5dc6f002c8fe753519832b30690ea88

  • SHA1

    cb3ef2f5cc005e5bf09fd57382a7df9bf98ebdd5

  • SHA256

    ff69d211cfeae76a0a81c53bcdb298864f22e55995e7e90c1df25ade7293191c

  • SHA512

    d5302c04e4f9953dd3ebf861882bd9e3a076555d5e81cf4426c2e21965dc60db73e47fe74bdc61345704303a5d2ad4f4fd44833e54f177d5ea6708fe08cfef8a

  • SSDEEP

    384:i06RPPwgNIlhLEq3PLsUKzOG6uJGe+n4E1a8YFalUB8tD10L2I8MRX0z:0+HlhLEQLoqLuYeE4EU8MyD10re

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f5dc6f002c8fe753519832b30690ea88_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f5dc6f002c8fe753519832b30690ea88_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1008
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1008 -s 36
      2⤵
      • Program crash
      PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads