Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/06/2024, 10:35
Static task
static1
Behavioral task
behavioral1
Sample
05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe
-
Size
8.0MB
-
MD5
05305aaf5a924eaab6c9da341f63ee86
-
SHA1
4ec6f4b9775276c4dc8d021355e5dba12eb5b565
-
SHA256
39efb7fbd13ddb7d7a2bad9a6d5bad15be03a7eee180769254facc3abd4929ef
-
SHA512
ae7de2347c1638d69f9f7bd85cc59279c62ede564c52d98a190f90dab593f95bdfffdd371755fc39806e106ec5d98fdbcf416a715be18e015a8702ca986aa5f5
-
SSDEEP
196608:P9e9fm5VE3DRj0e9eYvMTVjzmWZrX5NiyccpGFrt51LB:l6fm43ZvMTVjHV5dB8d
Malware Config
Signatures
-
Loads dropped DLL 64 IoCs
pid Process 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe 3424 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe -
Drops file in Program Files directory 2 IoCs
description ioc Process File created \??\c:\Program Files\baidubar\taobao.ico 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe File created \??\c:\Program Files\baidubar\qidian.ico 05305aaf5a924eaab6c9da341f63ee86_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5073d44e11a4bcff06e72e1ebfe5605f7
SHA15f4e85ab7a1a636d95b50479a10bcb5583af93f3
SHA256b96b39cb4ad98f4820b6fd17b67e43d8d0f4b2667d50caa46eff44af245d75bb
SHA512e9f99b96334764ae47aa026f7f24cfb736859a9131bd1c5ec7e070e830b651787f49910911f82e4ade0dc62fea0ad54ba210b07e44830eb2be6abb710a418a98
-
Filesize
11KB
MD500a0194c20ee912257df53bfe258ee4a
SHA1d7b4e319bc5119024690dc8230b9cc919b1b86b2
SHA256dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
SHA5123b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
-
Filesize
1KB
MD508297c1b75883cd5eec523f435df616d
SHA1745984b6f202d1ca0e975c97c4ab36d296f24b99
SHA256236397ce680623d3ca481b1a3f11b8535271eca868e9c6536e7b348cb4153acc
SHA512b9ffd2765f5b73cccbeaa0834ebac867fee2904d725ab2234ad7d6a6cbf1ea167894e234b8ea8c9e565cf22dc46a0824863dba29b97bed91925c97682b48e464
-
Filesize
1KB
MD50efe1829d835ecc46764832151fd2069
SHA16e2e5525797ea4f0eb94964e63670321d7c5bb12
SHA256f82ea98b1ffe870d287b22c41633694360f0b343fd7e50ae5d379c774464e92d
SHA51290c9d311c38af30162a3fee45038dc7eea101621dfab1eb7406eff8d51b0cc05eef51d97f5807f8b8e9d4813ce4ea755c322731c445ec446588256a3760c2201