Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
128s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
04/06/2024, 17:33
Static task
static1
Behavioral task
behavioral1
Sample
95b34bf815fc5d60841e4932b3d58a04_JaffaCakes118.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
95b34bf815fc5d60841e4932b3d58a04_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
95b34bf815fc5d60841e4932b3d58a04_JaffaCakes118.exe
-
Size
803KB
-
MD5
95b34bf815fc5d60841e4932b3d58a04
-
SHA1
0397ab026dddfc5fdbd5945ed26859fac3e586d2
-
SHA256
04d9b6815f332959746238188f9e18c6a0e4c57206d033dd7b49d5832dffa2b4
-
SHA512
4ba107caf3d0470ac9e2344f35fb951f34252f3bdcbb011853984162e36cb7f8cdce3122e5af2387ec67146e7f25168b7fc6b1cbc7351eacb25eeac0d7cc68da
-
SSDEEP
24576:eRaV9GpisC6SUru0VF9qDHx8AdCm+98NT3:eUMiilR9qDRrCm+GL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5084 4964 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\95b34bf815fc5d60841e4932b3d58a04_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\95b34bf815fc5d60841e4932b3d58a04_JaffaCakes118.exe"1⤵PID:4964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 4922⤵
- Program crash
PID:5084
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4964 -ip 49641⤵PID:4376