Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
25/06/2024, 13:36
Static task
static1
Behavioral task
behavioral1
Sample
0e44d93012cc78cabf2d992a608bff56_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0e44d93012cc78cabf2d992a608bff56_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e44d93012cc78cabf2d992a608bff56_JaffaCakes118.exe
-
Size
357KB
-
MD5
0e44d93012cc78cabf2d992a608bff56
-
SHA1
875faa5333e3ebd334e19b5b7edd3d711f38365c
-
SHA256
b0bebc565449beb9f3b4c23adec30e603026a04db6126a7e5e1cac1bc4f97655
-
SHA512
aa4849ee4c3d6b1c84e6ea4d6ba9c7f30987c2ad3b68350e8cda5cce9b0c32e0e839df48fb6abcbd0ce43192411aba03464c27e06b7d551f75d36052133dd813
-
SSDEEP
6144:Bmnm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFN6naDzsJK:BhMAxQ1bH8azq0SFNGaPsJK
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 548 1836 WerFault.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e44d93012cc78cabf2d992a608bff56_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0e44d93012cc78cabf2d992a608bff56_JaffaCakes118.exe"1⤵PID:1836
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1836 -s 3402⤵
- Program crash
PID:548
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1836 -ip 18361⤵PID:5024
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=2708,i,8660989700097327804,17931739887231169645,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:81⤵PID:468