Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
25/06/2024, 16:22
Static task
static1
Behavioral task
behavioral1
Sample
0ebc7567728bc03b3dddd3d069ecaff3_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ebc7567728bc03b3dddd3d069ecaff3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ebc7567728bc03b3dddd3d069ecaff3_JaffaCakes118.exe
-
Size
110KB
-
MD5
0ebc7567728bc03b3dddd3d069ecaff3
-
SHA1
64bafa215a002a98b65c5b1e582353b77229f087
-
SHA256
c0439c03b5eb67f1edde3ffaa04258a7e85f7595fb21919319e10b7e0ff6cfa7
-
SHA512
1813f5b1acfcd3e50ff9c6e97d2052a86002767f52f516b7b6d4a506cf9eb3343635d3a29befa40c7fd6fbe113b9cc15c6f8aef23c971855a5ecb8c587a6c9dc
-
SSDEEP
1536:/5qDEOZN6zD2Fu/lXGzS3IO5Punjh+dQX3gHzL5Wb7b07NquNBRN9/4szYmRwE:Yw7LujcgwTLA4NDN9dYmRt
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1328 1756 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ebc7567728bc03b3dddd3d069ecaff3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0ebc7567728bc03b3dddd3d069ecaff3_JaffaCakes118.exe"1⤵PID:1756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1756 -s 3842⤵
- Program crash
PID:1328
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1756 -ip 17561⤵PID:4192