Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2024, 01:23
Static task
static1
Behavioral task
behavioral1
Sample
5c76006725e5c943f013c7e6585628bd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5c76006725e5c943f013c7e6585628bd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5c76006725e5c943f013c7e6585628bd_JaffaCakes118.exe
-
Size
82KB
-
MD5
5c76006725e5c943f013c7e6585628bd
-
SHA1
6e28dd712cba83832883d800d63f6951fd1c7055
-
SHA256
7c021050ed8ab6ef774a3142a3f442751cb72036d82de40c0e851256d68f2317
-
SHA512
74447078102a67b2626c6ed542d660f3bfd11186fea6bde3c8e65878468decd076d412a787aaf55cd1df6233976a2b418500b60047fb315823e3820cd558a7d2
-
SSDEEP
1536:Q6A94mW6yTRemOwTJI5+UQ9FAp6Pg5MKLa3in0mrwGd6vWN:Q6A9668tOwTO+v9yAP5Cayfh6vWN
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2932 5c76006725e5c943f013c7e6585628bd_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2932 5c76006725e5c943f013c7e6585628bd_JaffaCakes118.exe