Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2024, 10:22
Static task
static1
Behavioral task
behavioral1
Sample
38ba91855e3d7d70862b24d81357858f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38ba91855e3d7d70862b24d81357858f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38ba91855e3d7d70862b24d81357858f_JaffaCakes118.exe
-
Size
88KB
-
MD5
38ba91855e3d7d70862b24d81357858f
-
SHA1
b9c84a9c247805a37647c560252ed83567255a17
-
SHA256
d7c880c9c6a586868cbe5d9b253f9d0ba4e99eb70a785759920a16674766e7a3
-
SHA512
6581aaa3ebaf17eb4989365489bfb4b8c2eacd579eaf6a752aa936190997a8a3f440675ca4a4f5ce13b3a9531644dd493abe997b6dec7e1d2ce077a128f9b684
-
SSDEEP
1536:/GSIWLjtzMlfFhol6j4cCt7+UFwySubKDRj+0HWwQAkELIZduxMo5VXIWJ6:uSI8jtzMRVj4cM7dpxbKDRj+9wQA3LIX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3572 3188 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\38ba91855e3d7d70862b24d81357858f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\38ba91855e3d7d70862b24d81357858f_JaffaCakes118.exe"1⤵PID:3188
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3188 -s 4282⤵
- Program crash
PID:3572
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3188 -ip 31881⤵PID:3372