Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

1871e92cef...18.exe

windows7-x64

3

1871e92cef...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2024, 02:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1871e92cefa5c0130d3d420f9a49ce2e_JaffaCakes118.exe

  • Size

    444KB

  • MD5

    1871e92cefa5c0130d3d420f9a49ce2e

  • SHA1

    2eaa7f00c5c7da017495f7cbf6809eab2b3b2caf

  • SHA256

    301ddd20b89bd7317a9489bb4b077c81057a7f85795c7e6e28b5e900aeb16df2

  • SHA512

    51aa24b8995a270aa0f6cc465677e3d1facfed18ef3eff9faba50fe9f99b71953addf93c825358d5b1689a8b7dff72097c2472a8d1c80532e26bd7bbc44eeb43

  • SSDEEP

    6144:qOao50SgbM3Kz8W5QD9ULLJ37AsjeyyRbT3p2dVF9IjueQBWsAu:Wy0SgbM3Kz8W5QDSLJ37AsjeyyHCpMA

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1871e92cefa5c0130d3d420f9a49ce2e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1871e92cefa5c0130d3d420f9a49ce2e_JaffaCakes118.exe"
    1⤵
      PID:4392
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4392 -s 640
        2⤵
        • Program crash
        PID:3764
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4392 -ip 4392
      1⤵
        PID:4620

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4392-11-0x0000000000400000-0x0000000000476000-memory.dmp

        Filesize

        472KB

        Download