Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
04/07/2024, 01:45
Static task
static1
Behavioral task
behavioral1
Sample
2435688342f8823757762f5793bf2f29_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2435688342f8823757762f5793bf2f29_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2435688342f8823757762f5793bf2f29_JaffaCakes118.exe
-
Size
348KB
-
MD5
2435688342f8823757762f5793bf2f29
-
SHA1
05141b29bcd0b8f150fe4747482242d535288ec9
-
SHA256
b5fd57553f6bb0e5f9f73554932e3c59c4b856e79921f8eb15c43e3219e3fec6
-
SHA512
2b4759782bc98621aad8e880cf460641259d53425673a366f54550e84dc9f3555f87747694559f4ac645ec937f73657ae9f1dd77db59bf2c2c3d51b6b769dcc7
-
SSDEEP
6144:MIPtkkByDz4GbDwHvDDxnixsJMfdRbwuRnH1K3ZNyTTRMNJkPX2LnXV0eOo/xObP:MeeXDzRyvDhlAdFfnH1GrMPXMnF0eOoQ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4004 4528 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\2435688342f8823757762f5793bf2f29_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2435688342f8823757762f5793bf2f29_JaffaCakes118.exe"1⤵PID:4528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4528 -s 2642⤵
- Program crash
PID:4004
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4528 -ip 45281⤵PID:3628