Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
20/06/2024, 00:36
Static task
static1
Behavioral task
behavioral1
Sample
0175cda1e8a4086eab0b1567a1134993_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0175cda1e8a4086eab0b1567a1134993_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0175cda1e8a4086eab0b1567a1134993_JaffaCakes118.exe
-
Size
88KB
-
MD5
0175cda1e8a4086eab0b1567a1134993
-
SHA1
effa991cab8b97e921794c225fa7f14a5b498159
-
SHA256
a988bdc11629dec3f4a725db8514b0be0618534547b8e4dcf865b5fc1e2ffdf1
-
SHA512
15db522ac0153c4111b26815769ae140b46cdca79d19c67edf769b551a43f0188c161239a64ce765fd25e4b696cba4e166cc7e4dcfbca5e8c79a12b9cccaab25
-
SSDEEP
1536:KaZoWz5/ohHecj4V7eT+mAh4dDUfi+8Xm7GKCHPkN2zFoyOkIWJ6:yWz5/+HRj6aTw4dDpcPCPkgzFoylI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3812 4284 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\0175cda1e8a4086eab0b1567a1134993_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0175cda1e8a4086eab0b1567a1134993_JaffaCakes118.exe"1⤵PID:4284
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4284 -s 4282⤵
- Program crash
PID:3812
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4284 -ip 42841⤵PID:3484