Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
66s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
28/04/2024, 22:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
063465650e1c1db465c488c9a40ccede_JaffaCakes118.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
063465650e1c1db465c488c9a40ccede_JaffaCakes118.exe
Resource
win10v2004-20240419-en
1 signatures
150 seconds
General
-
Target
063465650e1c1db465c488c9a40ccede_JaffaCakes118.exe
-
Size
788KB
-
MD5
063465650e1c1db465c488c9a40ccede
-
SHA1
0aa616f3165a44c2360a3e2978da51f002d7fc7b
-
SHA256
3978fafbb9ea191a2cf5af2180549ade5b01bcbff1e5105ef7d4b2e86eea86a6
-
SHA512
fd605fc073707e24edd4b7463153f27426d773b87116fade9cb208c1561f00d4264fea7cbb382fbcb8e594348bef4b49a21adc80bc7cf6bca0b16cf78c74b82f
-
SSDEEP
24576:qW8i87x4UeaR2kFey/r7TvF7kB73uroQ:qlik/7TS
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4604 1748 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\063465650e1c1db465c488c9a40ccede_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\063465650e1c1db465c488c9a40ccede_JaffaCakes118.exe"1⤵PID:1748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1748 -s 5802⤵
- Program crash
PID:4604
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1748 -ip 17481⤵PID:3992