Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
51s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/06/2024, 16:06
Static task
static1
Behavioral task
behavioral1
Sample
0793df9993145bfee75bb3c80a791b6e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0793df9993145bfee75bb3c80a791b6e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0793df9993145bfee75bb3c80a791b6e_JaffaCakes118.exe
-
Size
65KB
-
MD5
0793df9993145bfee75bb3c80a791b6e
-
SHA1
53ea4fb4990065f6c120aa62598ea01f0ed3a51f
-
SHA256
fed29aa27ccf4a419837469f63f56a1661d566ab5e126344d73287ce38c42b45
-
SHA512
317268936858c7c92f69068124959926432a6643f17023b4180fad69133df57adf4fed091f55e33e34b6fbb861927390e3768edb5674062dc8867b6df0187de5
-
SSDEEP
768:V6b7+ACq5PkkAPPBgHonpZ7+XY+qOXxUwQO60BeCoAyLoouJK:V2+ACqBmPdZCcOXxUVO7ROaJK
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5792 2156 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\0793df9993145bfee75bb3c80a791b6e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0793df9993145bfee75bb3c80a791b6e_JaffaCakes118.exe"1⤵PID:2156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2156 -s 2722⤵
- Program crash
PID:5792
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2156 -ip 21561⤵PID:6060