Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24/06/2024, 00:06
Behavioral task
behavioral1
Sample
04ef742b7403b280d680550885e867c3_JaffaCakes118.dll
Resource
win7-20240508-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
04ef742b7403b280d680550885e867c3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
04ef742b7403b280d680550885e867c3_JaffaCakes118.dll
-
Size
630KB
-
MD5
04ef742b7403b280d680550885e867c3
-
SHA1
6a6300dab6f66d625973ab67847b4b18d6d9c8d8
-
SHA256
c8a081952c97bfeadc75f6c1f423f2160e867af08a1112f19837b8581ba7a31b
-
SHA512
9eac5464bb9436a6e0a6daa0d379c7668e33994786a28ac0761d2e90ed3f9acaad823c13d9f97f9740e0e8ffc6d1ce7f538d1d0b0376b8208413c2f6c07ea6ac
-
SSDEEP
12288:Fnd3WsHXAVP61BwA6BAbFgAQ1i+XzwtUgLm80OFOJvmFmpeFVM:xdWCAVP6UAeAh68+XVhGQmcpWM
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2356 wrote to memory of 2216 2356 regsvr32.exe 80 PID 2356 wrote to memory of 2216 2356 regsvr32.exe 80 PID 2356 wrote to memory of 2216 2356 regsvr32.exe 80
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\04ef742b7403b280d680550885e867c3_JaffaCakes118.dll1⤵
- Suspicious use of WriteProcessMemory
PID:2356 -
C:\Windows\SysWOW64\regsvr32.exe/s C:\Users\Admin\AppData\Local\Temp\04ef742b7403b280d680550885e867c3_JaffaCakes118.dll2⤵PID:2216
-