Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
04/07/2024, 02:38
Static task
static1
Behavioral task
behavioral1
Sample
2458d03eded50ff8160c3ca728ba13e2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2458d03eded50ff8160c3ca728ba13e2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2458d03eded50ff8160c3ca728ba13e2_JaffaCakes118.exe
-
Size
388KB
-
MD5
2458d03eded50ff8160c3ca728ba13e2
-
SHA1
790a1cd462dda176b07ac78aae60fdc009e6ba6b
-
SHA256
d5bc747c17b3138527c2301791ff1fab08612602c44b7d3b5141bda6f8ade7d3
-
SHA512
3bf6c6b4f77ab78aabec847afc3f88e824f232820bff08d81ca529a712b837c1e517da59b462f4de1ac8da7457bd5437423970960a65e878725e00ba0a592b05
-
SSDEEP
3072:e2voeN+jaiG17Ef5KlrKnBZ59oZSmveDlcjIV8jlwIGU+V4EFFCcll3H3rH3XD7U:ZQeNai17Y56rKnBfWhveajzxwIGU
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1204 3552 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2458d03eded50ff8160c3ca728ba13e2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2458d03eded50ff8160c3ca728ba13e2_JaffaCakes118.exe"1⤵PID:3552
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3552 -s 2842⤵
- Program crash
PID:1204
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3552 -ip 35521⤵PID:1192