Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
08/07/2024, 08:37
Static task
static1
Behavioral task
behavioral1
Sample
2bad2162e12dcbfdec107133905dc468_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bad2162e12dcbfdec107133905dc468_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bad2162e12dcbfdec107133905dc468_JaffaCakes118.exe
-
Size
22KB
-
MD5
2bad2162e12dcbfdec107133905dc468
-
SHA1
b068ddef0a60c1d2235dabf89bdc52983d5520a9
-
SHA256
4674573b1f2d3cb89c6d6a265c7db89c94c1c97a0419e8550aae213b0c2ee53a
-
SHA512
0b94f7786b35e5abf7da8467702b5f7884ad3892ad0249f0e057315dc6e8de3893a324bf2ec568053fba7e6dfedc72c8b2fe9d19a8c295d7936ff85c5c5d3273
-
SSDEEP
384:Om0UR+hYJvfooZ/ntl+SgNwSeTbnLf45soepQfmeN9Ve8jlZ5r6qGbxh:Om0UR+hYJvfL/X+P8/loe29/Exh
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 4588 2bad2162e12dcbfdec107133905dc468_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4588 2bad2162e12dcbfdec107133905dc468_JaffaCakes118.exe