Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 21:17
Behavioral task
behavioral1
Sample
3202ed71fe60263fe2bbdf05f946de0b_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3202ed71fe60263fe2bbdf05f946de0b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
3202ed71fe60263fe2bbdf05f946de0b_JaffaCakes118.exe
-
Size
204KB
-
MD5
3202ed71fe60263fe2bbdf05f946de0b
-
SHA1
8f22bd45e2289a628cdd1f1df6f96e0f938fbdca
-
SHA256
1da31f7ca2831db8e61b19305bc7bcaf375ca4c7e7b2edb29e2be86db691fd86
-
SHA512
9a075362d04952446d8e11a485165315e1e49a2862c4fa78e381d08948b349b3f6dc0861679e3fe9d3dd3fe5093fc0609497b6288937913e841251b3a0596fde
-
SSDEEP
6144:RatSWSmBdXBjDAEeEBKL5N29lPvbBcY5mud+Tz:ie
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2268-0-0x0000000000400000-0x0000000000435000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 3076 2268 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\3202ed71fe60263fe2bbdf05f946de0b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3202ed71fe60263fe2bbdf05f946de0b_JaffaCakes118.exe"1⤵PID:2268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 8522⤵
- Program crash
PID:3076
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 2268 -ip 22681⤵PID:4092