Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
66s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
30/04/2024, 11:15
Static task
static1
Behavioral task
behavioral1
Sample
09a7fad2d3d8c856231873130287fb65_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
09a7fad2d3d8c856231873130287fb65_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
09a7fad2d3d8c856231873130287fb65_JaffaCakes118.exe
-
Size
3.4MB
-
MD5
09a7fad2d3d8c856231873130287fb65
-
SHA1
b9a34eee6f4c401f238e08f3cd25382c68643c39
-
SHA256
27fda26e14f2f0af607e9b32ae55a9c857b524e6c96cf9ebf2477430176484a9
-
SHA512
65fe915011bb6efb4ccf6a0bc6136026b5cc83e2b1a6fdeb1625e30792266f62e3cbfa0891e9a8eb5c1cd10b0724abaf99a7dd7972c0a791e8bc59e05e81fd4c
-
SSDEEP
49152:va1ISQus8/2Ge/5mMk1HvWpcnVcVyCDxl4KZKWCbquSVex1yrZOS:y1ISQusLGKmMaHgcnbgxPKWCbMs1G1
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3720 1516 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\09a7fad2d3d8c856231873130287fb65_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\09a7fad2d3d8c856231873130287fb65_JaffaCakes118.exe"1⤵PID:1516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1516 -s 6122⤵
- Program crash
PID:3720
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1516 -ip 15161⤵PID:4612