Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2024, 21:48
Static task
static1
Behavioral task
behavioral1
Sample
3ad57e407ad45cec3304d23ad77b0666_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ad57e407ad45cec3304d23ad77b0666_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ad57e407ad45cec3304d23ad77b0666_JaffaCakes118.exe
-
Size
140KB
-
MD5
3ad57e407ad45cec3304d23ad77b0666
-
SHA1
070fc8ebfabe2e9a906610dce953df970d46bc65
-
SHA256
d2a6d7afd53d5e708955150131e1a5a5bdbac8ee2f11e2cce7de83a805fc768a
-
SHA512
ea0ed355230a07a6c3c0f0938d480af9ae8bf432940982dad845a5caf841a8db237a46789014c5e620a624359d00121390980b4f59de36c67d51d6987a4933a0
-
SSDEEP
768:o/zPHS7Bogo9UvmX7ScwdFWQePRiogxjxAMCVWZvFC/Fh5KDOgemvOGD9fSwAzZ5:o/bYFCiVx1AMbC/FhQDf+GoRwH6qn
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 956 1712 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ad57e407ad45cec3304d23ad77b0666_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3ad57e407ad45cec3304d23ad77b0666_JaffaCakes118.exe"1⤵PID:1712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1712 -s 2162⤵
- Program crash
PID:956
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1712 -ip 17121⤵PID:1752