Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/07/2024, 17:39

General

  • Target

    3a1e9a0fe3f923cbc90ce4a50acaffe5_JaffaCakes118.exe

  • Size

    384KB

  • MD5

    3a1e9a0fe3f923cbc90ce4a50acaffe5

  • SHA1

    eb1504156040c40fc652769ec5331ae53a907dc7

  • SHA256

    99ba21fc9724ba75223e1cf9c22c5626fae052bd5fc0ce36492f8589f91c4e30

  • SHA512

    cf5b0670e9a052cbe5b670264eb6c3ac0e1285369958740da85012d1a08e217f5bed0420d37944410661c72c232f88b27a1ae62d84047e1382b7b46def6a0363

  • SSDEEP

    12288:bINn6IdPkXxfDyLHNV4rXk3+RHnnrAUNAF:bIN6IdPkXtyZV4rU3+FnM

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3a1e9a0fe3f923cbc90ce4a50acaffe5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3a1e9a0fe3f923cbc90ce4a50acaffe5_JaffaCakes118.exe"
    1⤵
      PID:60
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 60 -s 516
        2⤵
        • Program crash
        PID:2492
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 60 -ip 60
      1⤵
        PID:1516

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/60-0-0x0000000000400000-0x0000000000494000-memory.dmp

        Filesize

        592KB

      • memory/60-1-0x0000000000650000-0x000000000069A000-memory.dmp

        Filesize

        296KB

      • memory/60-2-0x0000000000650000-0x000000000069A000-memory.dmp

        Filesize

        296KB

      • memory/60-3-0x00000000006C0000-0x00000000006C1000-memory.dmp

        Filesize

        4KB

      • memory/60-4-0x0000000002290000-0x0000000002299000-memory.dmp

        Filesize

        36KB

      • memory/60-5-0x00000000006D0000-0x00000000006E9000-memory.dmp

        Filesize

        100KB

      • memory/60-6-0x0000000000650000-0x000000000069A000-memory.dmp

        Filesize

        296KB

      • memory/60-8-0x0000000000400000-0x0000000000494000-memory.dmp

        Filesize

        592KB