Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
05/07/2024, 10:48
Static task
static1
Behavioral task
behavioral1
Sample
26dca09654d211bd3a790599ae44ec8b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26dca09654d211bd3a790599ae44ec8b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26dca09654d211bd3a790599ae44ec8b_JaffaCakes118.exe
-
Size
430KB
-
MD5
26dca09654d211bd3a790599ae44ec8b
-
SHA1
3ed161db9675fa1be6ea8203d6d58f058e156b8d
-
SHA256
591fc7645eb7d12fbc119c7881cd8bba3a252b6072008f17b04aacb6602d0886
-
SHA512
60b357f2dfebcce144d3e790543bddde208d012c4909643bda1f63df38b9815b67f473a1d218854b525f17c7074c03da626f81cf2f7fab0d4749a2446a017a6e
-
SSDEEP
6144:jpO10tzCwBJai9i1p7ihxKicoEB02oWYsLxlH1CMX/D751LmZXds54p2G+dBF:622i9LHdcPBAuxlVtD751epmv
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1856 4760 WerFault.exe 80 1980 4760 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\26dca09654d211bd3a790599ae44ec8b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\26dca09654d211bd3a790599ae44ec8b_JaffaCakes118.exe"1⤵PID:4760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 5362⤵
- Program crash
PID:1856
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 5442⤵
- Program crash
PID:1980
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4760 -ip 47601⤵PID:2776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4760 -ip 47601⤵PID:744