Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/07/2024, 10:22

General

  • Target

    38ba91855e3d7d70862b24d81357858f_JaffaCakes118.exe

  • Size

    88KB

  • MD5

    38ba91855e3d7d70862b24d81357858f

  • SHA1

    b9c84a9c247805a37647c560252ed83567255a17

  • SHA256

    d7c880c9c6a586868cbe5d9b253f9d0ba4e99eb70a785759920a16674766e7a3

  • SHA512

    6581aaa3ebaf17eb4989365489bfb4b8c2eacd579eaf6a752aa936190997a8a3f440675ca4a4f5ce13b3a9531644dd493abe997b6dec7e1d2ce077a128f9b684

  • SSDEEP

    1536:/GSIWLjtzMlfFhol6j4cCt7+UFwySubKDRj+0HWwQAkELIZduxMo5VXIWJ6:uSI8jtzMRVj4cM7dpxbKDRj+9wQA3LIX

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\38ba91855e3d7d70862b24d81357858f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\38ba91855e3d7d70862b24d81357858f_JaffaCakes118.exe"
    1⤵
      PID:3188
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3188 -s 428
        2⤵
        • Program crash
        PID:3572
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3188 -ip 3188
      1⤵
        PID:3372

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads