Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

05448bcc5a...18.exe

windows7-x64

1

05448bcc5a...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    66s
  • max time network
    54s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/04/2024, 13:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    05448bcc5a011ca02e6d543d6b8634fb_JaffaCakes118.exe

  • Size

    104KB

  • MD5

    05448bcc5a011ca02e6d543d6b8634fb

  • SHA1

    c63dd7396f2f3712240122a83b8901f9d0c7fb19

  • SHA256

    cb43636ee965c3c345bcd5b4b649620b4434b4a74d2e7ec7b03dd1e317cb4850

  • SHA512

    52dba65dcf95f7d06ff84b8e19aa66ef268307fe35bc8ca71400d5a5fff4dbbc3c2ba6d8ea9d55fecafe2f9d09d24d6d68bc1877367782e0a231eb2cc2b8580a

  • SSDEEP

    1536:9kq6M6S6RxTWGpFIMusizMZwnwFRBbwCKSE8dkhsznjDSkR:9lp6S6RAGfosizMZEmJzGSzjWkR

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\05448bcc5a011ca02e6d543d6b8634fb_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\05448bcc5a011ca02e6d543d6b8634fb_JaffaCakes118.exe"
    1⤵
      PID:3228
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3228 -s 472
        2⤵
        • Program crash
        PID:5028
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3228 -ip 3228
      1⤵
        PID:4460

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3228-0-0x0000000001000000-0x000000000101D000-memory.dmp

        Filesize

        116KB

        Download