Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 21:38
Static task
static1
Behavioral task
behavioral1
Sample
3efaac243b95bfb0d28ad3fad57f3c63_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3efaac243b95bfb0d28ad3fad57f3c63_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3efaac243b95bfb0d28ad3fad57f3c63_JaffaCakes118.exe
-
Size
32KB
-
MD5
3efaac243b95bfb0d28ad3fad57f3c63
-
SHA1
90c75e640ff50ec60d87663bae9505db0247a0c8
-
SHA256
8c52831216960505fbd8937f5b220fb9948eb421af5feaab72aa5fc53be4bfd2
-
SHA512
13dad57329fb4eeb6a990977b535ee40ca5e552e83d6aac507afe0d7345f14ed81873f38e52ed107414f087d5c93799074f3612652d06667e09614022e304b99
-
SSDEEP
192:SZOR8TCv13Y4h1T4QTMH7+8aXd7uwWksoGEMB1jnWLtDVVmF/3:S1C1FLTKq8aNU5JEMBtWBDvmB3
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2740 2100 WerFault.exe 83 724 2100 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\3efaac243b95bfb0d28ad3fad57f3c63_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3efaac243b95bfb0d28ad3fad57f3c63_JaffaCakes118.exe"1⤵PID:2100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2100 -s 2522⤵
- Program crash
PID:2740
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2100 -s 2642⤵
- Program crash
PID:724
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2100 -ip 21001⤵PID:4604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2100 -ip 21001⤵PID:3712