Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10/07/2024, 12:39
Static task
static1
Behavioral task
behavioral1
Sample
34c0d0be038e9f4276839d373f4b3270_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34c0d0be038e9f4276839d373f4b3270_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34c0d0be038e9f4276839d373f4b3270_JaffaCakes118.exe
-
Size
88KB
-
MD5
34c0d0be038e9f4276839d373f4b3270
-
SHA1
183a8ea15767dcadf125ccb752f9146a70714703
-
SHA256
872e0487f9f4ecfdb02cf1af5e7824217c7cd1aad473c27e990c0a3b85a22830
-
SHA512
53de25ca2bdbd5fbc73a08ce58dbfaa2a562d1030f69c116f7664d6fb756e0b729c5706453dcff7b93be5c427076d154faa530d613fe811d6c50717ef365980d
-
SSDEEP
1536:d3ETstzWmNGYsDW6oH4/s91CnhQ7XTZdN+LVtwVmdJl9Ygmo/HhzvVrh3:n3BsDOzKnC7jZangS9YkHhzpl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4684 34c0d0be038e9f4276839d373f4b3270_JaffaCakes118.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 4684 34c0d0be038e9f4276839d373f4b3270_JaffaCakes118.exe