Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
09/07/2024, 08:17
General
-
Target
2f9d61d152baec1a4842e298a943efa7_JaffaCakes118.exe
-
Size
68KB
-
MD5
2f9d61d152baec1a4842e298a943efa7
-
SHA1
75382b0590f802eadffa2c298a96cb3e0219aa06
-
SHA256
8cc63dd4c1e18701f07d9d952634b1c40bb0e6602669b0289d540f27cb16525c
-
SHA512
cfd9c083b3b51828274fb882e8cb01b5c7a7df95a85f328e44362fcdc7df7e8307ad7a49d254acc02fa120934f4b556087d63274aec0f170bd294bf437935365
-
SSDEEP
1536:53ZhGd30nIPMIHuNUvC7VRYTp1yNFTajLWxDGE:RNwMIONUaQ+7mLXE
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2f9d61d152baec1a4842e298a943efa7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2f9d61d152baec1a4842e298a943efa7_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1148 -s 24162⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1148 -ip 11481⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB