Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
19/04/2024, 04:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f97d7a9cf2778b25867e23f58082f909_JaffaCakes118.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
f97d7a9cf2778b25867e23f58082f909_JaffaCakes118.exe
Resource
win10v2004-20240412-en
1 signatures
150 seconds
General
-
Target
f97d7a9cf2778b25867e23f58082f909_JaffaCakes118.exe
-
Size
422KB
-
MD5
f97d7a9cf2778b25867e23f58082f909
-
SHA1
45eb6d8bbd52279d4497be201342c337c21f4619
-
SHA256
f76dfd8dd2d4b014aa5f945217e799e7f3e2157618e373b41b1ff2c98e41712b
-
SHA512
efb532904a1a293d4e51c969caa45e155e696cc35e8b3829675039687a8e061ca46f62d3130b8103eeb83e8f06cc319913fce8edcd0396abc041faf9d44abd99
-
SSDEEP
12288:5C7g1QXWXHLT8z8UtRvlC4aTGPx92wTgub:5Aq9HX+vjaSPSwTg+
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2732 1420 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\f97d7a9cf2778b25867e23f58082f909_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f97d7a9cf2778b25867e23f58082f909_JaffaCakes118.exe"1⤵PID:1420
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1420 -s 15602⤵
- Program crash
PID:2732
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1420 -ip 14201⤵PID:2008