Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2ecf7ec7ce...18.exe

windows7-x64

3

2ecf7ec7ce...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 03:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2ecf7ec7ce175ab2296e6eaaac36fb73_JaffaCakes118.exe

  • Size

    234KB

  • MD5

    2ecf7ec7ce175ab2296e6eaaac36fb73

  • SHA1

    9585ec38c96e056bca02cdc2b6b89ca7db7b85c4

  • SHA256

    daf7e350d270cbbaa0346a460106c73ab9a6d9fc589677e9ff1c1d29f5ff12eb

  • SHA512

    e18a2257be47fe7f97f94a1f2d1638dfd2fe18594ba8612fd90945d016726a4d025c094b0da493541c49ca6567de7a2dc1190aec1a557371946204f6d20c4b98

  • SSDEEP

    6144:RL3Si2xLwgxYv/srWpAVs5uPD6h9FPjcsel:+xLVMsCpn5K6hvLY

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2ecf7ec7ce175ab2296e6eaaac36fb73_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2ecf7ec7ce175ab2296e6eaaac36fb73_JaffaCakes118.exe"
    1⤵
      PID:4304
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4304 -s 508
        2⤵
        • Program crash
        PID:588
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4304 -s 552
        2⤵
        • Program crash
        PID:2220
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4304 -ip 4304
      1⤵
        PID:4648
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4304 -ip 4304
        1⤵
          PID:2904

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4304-0-0x0000000001000000-0x000000000103D000-memory.dmp

          Filesize

          244KB

          Download

        • memory/4304-1-0x0000000001000000-0x000000000103D000-memory.dmp

          Filesize

          244KB

          Download