Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2024, 02:04
Static task
static1
Behavioral task
behavioral1
Sample
82b7bbe34b8ea34c27ce1e90b5509ba5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
82b7bbe34b8ea34c27ce1e90b5509ba5_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
82b7bbe34b8ea34c27ce1e90b5509ba5_JaffaCakes118.exe
-
Size
197KB
-
MD5
82b7bbe34b8ea34c27ce1e90b5509ba5
-
SHA1
d8dd47e3ebcedc52f4e0af8d57adcf224333b31e
-
SHA256
62bda321dc35fab4260362b95338b91dc01f9049df2017d317ef715d6e542510
-
SHA512
c71246e3e697b0224e44ce06b73658a5cb4587cad153cd5eaf3a0d0cd0847a0e48865adadb9ec388f8a8bfd56a4bacb88be2e372c8974c718c197b48d6720abe
-
SSDEEP
3072:RsTAoaI4TJW9dcjwGt4htE0GvhFeXorBKO0G9k0fZ6mOOZxHBNNR/73Y:Rs74k9q/Ce0GvhvAO0G9HZDZjt73Y
Malware Config
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Program crash 1 IoCs
pid pid_target Process procid_target 4364 3916 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\82b7bbe34b8ea34c27ce1e90b5509ba5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\82b7bbe34b8ea34c27ce1e90b5509ba5_JaffaCakes118.exe"1⤵PID:3916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3916 -s 14242⤵
- Program crash
PID:4364
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3916 -ip 39161⤵PID:848