Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
08/07/2024, 11:51
Static task
static1
Behavioral task
behavioral1
Sample
2c3cbbb07746776b763efc4a52728d1d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c3cbbb07746776b763efc4a52728d1d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c3cbbb07746776b763efc4a52728d1d_JaffaCakes118.exe
-
Size
24KB
-
MD5
2c3cbbb07746776b763efc4a52728d1d
-
SHA1
8eda73b75a2f87141eeea7b537d689b2d8f9b708
-
SHA256
be8ef03d35b9a3ac1bd405ffb7c383a423cd6876b1541734096d9276e78036d6
-
SHA512
069753b642db28967b32a6ffb82610f569a6d62df69a50837a3811379d4df27dab8bd4fe55e528dfff152cd8714510ce2c3a1dd7fa19a6f5eb326b210b3aae3f
-
SSDEEP
192:Ih5LEhm92Yxx3sd1VLZ+yHU1JZROjmv6ujkDfJd7+Dka6:IvLVpstZ+t1rRrv6ZLS6
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1908 464 WerFault.exe 81 2852 464 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c3cbbb07746776b763efc4a52728d1d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2c3cbbb07746776b763efc4a52728d1d_JaffaCakes118.exe"1⤵PID:464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 464 -s 2522⤵
- Program crash
PID:1908
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 464 -s 2642⤵
- Program crash
PID:2852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 464 -ip 4641⤵PID:4860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 464 -ip 4641⤵PID:3620