Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
01/06/2024, 15:12
Static task
static1
Behavioral task
behavioral1
Sample
8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118.exe
-
Size
694KB
-
MD5
8ada4692c8fee84b45e1a72c228f6ebc
-
SHA1
2873e6bce9492358f8d7ba5df733098588d8a1be
-
SHA256
de0fbc532887b2b1b643bbe5a80facb448b634ba8d347f8c2bef677bc06f7c30
-
SHA512
2d51ac45e010ac73c7332125a99fab550b72fc1459ad7c3f2593c7a208d98583827d8cfe473dbcfb22bf1d699d2a0b857f7275c0bc485c3dd85e617cd18a2ef9
-
SSDEEP
12288:I2zCKrWpxxIOROaDd+nbRofARmOG8BRXjIjC5HBZJM82v9:I+C5OaDd+ndhQqRHH3J92F
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4868 4152 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118.exe"1⤵PID:4152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4152 -s 4362⤵
- Program crash
PID:4868
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4152 -ip 41521⤵PID:4924