Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
12/05/2024, 03:41
Static task
static1
Behavioral task
behavioral1
Sample
38132fd87bb9345988f66d12455a13be_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
38132fd87bb9345988f66d12455a13be_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
38132fd87bb9345988f66d12455a13be_JaffaCakes118.exe
-
Size
989KB
-
MD5
38132fd87bb9345988f66d12455a13be
-
SHA1
08bcac0bbb0fac425336140eae7f885c7858282d
-
SHA256
e70817377f772a8a4e3b7860b1adf749b1181bcb6309c8d29833b73fbbcbffda
-
SHA512
c7a7495c977fdbce26b03117565376e41ad0525487b76e55fb7b449ccebb8f23b92bd7bd14736f49c11aa06497cf67ea50d9804541ab414b175a6d5f88f4e3fe
-
SSDEEP
24576:/D5KobIRq5Ik3E+Wkpqg2bZZ82NNzjLrcUZHSE5wHlXmA4WEe2TNS2VCpIa:FK4I+vFpUZZ/NNv51e2TNS2CR
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3468 38132fd87bb9345988f66d12455a13be_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\38132fd87bb9345988f66d12455a13be_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\38132fd87bb9345988f66d12455a13be_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3468
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3668,i,1067197275908310731,12785105794523264014,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:81⤵PID:3896