Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/05/2024, 11:22

General

  • Target

    34579c5a4d6372d6fdae31cf7d637db9_JaffaCakes118.exe

  • Size

    5.2MB

  • MD5

    34579c5a4d6372d6fdae31cf7d637db9

  • SHA1

    8b063ec1a905f2a46a4e7d622689f5a9bfb0b9be

  • SHA256

    0173b54527b8cfc9b7ffdca9a2094d19af1e363fa457d86030998b763e0ad3c0

  • SHA512

    64cc4a336cba1e7daee08c80eb6d8805b104f2641d8a48877f74265eb8c5c105a2668e4790427c535338e80b0d9de29b7bcdeb1194d16d73611f3f10c5cbe775

  • SSDEEP

    98304:JOcbfYb3BbnfqhzaItij5lBuUXwCPGj+JDqON2vTOCFgRGjjXsN6GtTivfh:ZgbxuoIgNl4UXtjDqO0LO/Z0GpKf

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\34579c5a4d6372d6fdae31cf7d637db9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\34579c5a4d6372d6fdae31cf7d637db9_JaffaCakes118.exe"
    1⤵
      PID:2960

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2960-0-0x00007FF7A9470000-0x00007FF7A9D23000-memory.dmp

      Filesize

      8.7MB

    • memory/2960-1-0x00007FF7A9470000-0x00007FF7A9D23000-memory.dmp

      Filesize

      8.7MB