Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
08/07/2024, 12:36
Static task
static1
Behavioral task
behavioral1
Sample
2c5ed753bc7abd804fdcd0fe566fc63e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c5ed753bc7abd804fdcd0fe566fc63e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c5ed753bc7abd804fdcd0fe566fc63e_JaffaCakes118.exe
-
Size
156KB
-
MD5
2c5ed753bc7abd804fdcd0fe566fc63e
-
SHA1
f528d776346aa13aff3c97af26d947b59fc298a1
-
SHA256
0febe34bb293f6de2edf440d29976f9c546aecb02eb0b3ee78c5c4473fabf097
-
SHA512
67a43d0616aae25b5b5e4b672f261828c6fb6bc6d62a09bbed29adf212f116d48c26d26f4a034e145da3960c5a922fd3c8664da5336f9c2b227a6755942c6b8c
-
SSDEEP
3072:s49BY5KsA1yUg1+If5clnat6ZRSXFy8bw6Jm+lweut6OAq:HYi15g5qXZRSVRjJtJu
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4248 2580 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c5ed753bc7abd804fdcd0fe566fc63e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2c5ed753bc7abd804fdcd0fe566fc63e_JaffaCakes118.exe"1⤵PID:2580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2580 -s 3882⤵
- Program crash
PID:4248
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2580 -ip 25801⤵PID:4692