Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    20/06/2024, 09:54

General

  • Target

    04edc9d53fbfac3591cd4fafe1a2b650_JaffaCakes118.exe

  • Size

    252KB

  • MD5

    04edc9d53fbfac3591cd4fafe1a2b650

  • SHA1

    1f4695252a13de9c6280e1b2005c9387ad9fa774

  • SHA256

    d23ab2984bc871ce6f05a08742d412d73bb5bd26b46519b536fea3c520a6f3dc

  • SHA512

    a42e9761075b2fe473f9c7576ac0a60a6a9a510a1f64bfbb2c6f6bf12d61791bec8127ce9b588723585f0cec7823d5d1849b3091ab1640945e44e28dcf11c146

  • SSDEEP

    6144:8B9gCSDx0ZKaN6RxS8DGapXsGKLu8NxSsQLH5Adm:8wCSl0URRLDbtmxxSsPdm

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\04edc9d53fbfac3591cd4fafe1a2b650_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\04edc9d53fbfac3591cd4fafe1a2b650_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2580
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2580 -s 268
      2⤵
      • Program crash
      PID:2788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2580-0-0x0000000000400000-0x0000000000443000-memory.dmp

    Filesize

    268KB

  • memory/2580-1-0x00000000002E0000-0x0000000000323000-memory.dmp

    Filesize

    268KB