Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
01/07/2024, 20:06
Static task
static1
Behavioral task
behavioral1
Sample
1c54b4a37d04f10e498dd08c66d4d9d2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c54b4a37d04f10e498dd08c66d4d9d2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c54b4a37d04f10e498dd08c66d4d9d2_JaffaCakes118.exe
-
Size
404KB
-
MD5
1c54b4a37d04f10e498dd08c66d4d9d2
-
SHA1
09598b549b1b847c1418b6480f2c6d1de58f0c99
-
SHA256
f4e65531881543c36c3a3f5ed880fc774862610c63e2059949447f153f720728
-
SHA512
1bdb42b6fda4d12a5fbced0c309a299198bd9f2ded7aa169b8b5ab0233f7244534e72fd964f2a941856f75c7d0f4d15102b117aad1b257692aa9f2a5a603bb94
-
SSDEEP
12288:NE7WFb7sEnS1uiyOGgc2KABe5gRAu9YYZN0rnHrjJJXZI:NmWFb7sEoBynRluWYZ2XjJJXZI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1856 3640 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c54b4a37d04f10e498dd08c66d4d9d2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1c54b4a37d04f10e498dd08c66d4d9d2_JaffaCakes118.exe"1⤵PID:3640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3640 -s 4842⤵
- Program crash
PID:1856
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3640 -ip 36401⤵PID:2128