Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/06/2024, 09:44
Static task
static1
Behavioral task
behavioral1
Sample
04d93e92e2ea8710a6825f5b31048436_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04d93e92e2ea8710a6825f5b31048436_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04d93e92e2ea8710a6825f5b31048436_JaffaCakes118.exe
-
Size
23KB
-
MD5
04d93e92e2ea8710a6825f5b31048436
-
SHA1
d1ec82eca264dad9ebc89edf926b17d0f176efbb
-
SHA256
4ed362ad82753ac4643d0760aa61ee0ccd08507554f9c81fe7c2c54fcf193aa4
-
SHA512
e18bf4e2d33ea20092cb7377311e651599d94e9f9cea6593691e4d99c63fa4c580487c022231e9dd7cad0ed2a6d05343edb6e619af12cbb36c29abe480b29c20
-
SSDEEP
384:bLaDf8DFvuJsVga52dK0/cTkTR8VTYRth8zRIsq6+6qmMtc882dvm:bLyovkaAU0/c4TRM0thG1FRqmO18am
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3264 5044 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\04d93e92e2ea8710a6825f5b31048436_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\04d93e92e2ea8710a6825f5b31048436_JaffaCakes118.exe"1⤵PID:5044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 3082⤵
- Program crash
PID:3264
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5044 -ip 50441⤵PID:1624