Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24/06/2024, 14:33
Static task
static1
Behavioral task
behavioral1
Sample
09154030692970fa8d82e3cc6904a68c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
09154030692970fa8d82e3cc6904a68c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09154030692970fa8d82e3cc6904a68c_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
09154030692970fa8d82e3cc6904a68c
-
SHA1
39bdd6f8fb2f574aaaad17f06aaed7e4615d68c0
-
SHA256
413c59c7b15c6f8ec904adffa00d688dca0e93bc422cfd8bc3d0208002224d0b
-
SHA512
fa2c65ce0a2765b3b97e92fee9e730db96e21165a2149e5266f5bf50e49dcc97fde466bf7d01fe35d440a15dffaca1663ef0184e142019d27b0435b4c954e434
-
SSDEEP
24576:1C7sL+juH//FIOVsEAzh4wLvkuB/uFP8EZ15ApaOU98znD:wsLUufNIAsfzh4etB/UGkh98znD
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4684 452 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\09154030692970fa8d82e3cc6904a68c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\09154030692970fa8d82e3cc6904a68c_JaffaCakes118.exe"1⤵PID:452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 452 -s 8362⤵
- Program crash
PID:4684
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 452 -ip 4521⤵PID:2748