Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
05/05/2024, 08:32
Static task
static1
Behavioral task
behavioral1
Sample
16d6da1ce68edcf064335a92bd14a8b2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16d6da1ce68edcf064335a92bd14a8b2_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
16d6da1ce68edcf064335a92bd14a8b2_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
16d6da1ce68edcf064335a92bd14a8b2
-
SHA1
3c4434c808a3097b024d12e4d8ecbe3a3b16ff90
-
SHA256
a056170c3d94424992d061ee455b48823fcf49c6d9d0b4bc16a4142866283811
-
SHA512
91708bde6afe4463e29c88ed09ee4db44afe29cb7f0b67837dfc67f9b79f24c2236e5606199b4680afe8568b662658cc495553ebe2fe08bbcd2dbabb50ff4bbe
-
SSDEEP
24576:44923NEP/mZTfIc3QQp6LDVtFhxzSP57G73GEyYwH/d1oDm:4K29ZUc37pSRShY3xy9Hz
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 368 16d6da1ce68edcf064335a92bd14a8b2_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 368 16d6da1ce68edcf064335a92bd14a8b2_JaffaCakes118.exe