Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 02:56
Static task
static1
Behavioral task
behavioral1
Sample
3bbcefa31389862aa36e13e7ba5d662d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bbcefa31389862aa36e13e7ba5d662d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bbcefa31389862aa36e13e7ba5d662d_JaffaCakes118.exe
-
Size
185KB
-
MD5
3bbcefa31389862aa36e13e7ba5d662d
-
SHA1
a4dce14fcfe23b6a78f2bd3a89af889ce74a2b6f
-
SHA256
43d282bc1c75d5191e08c6ffef6a7169a1fff3b9abbd05b6e21fff93cdb0d86d
-
SHA512
fcb4639283211c7d55db977ca037a86103a0f7b125cad2fa43579644e72d916249f4e2d384880af7ded04f814e84e2ac21910dba115972bb73c8ad5d489a110b
-
SSDEEP
3072:G8AkSbDZfP1C+q1MXWWgwuEHxLDHP14DGM8nM2MbbwAYQdQY1xVvCBcxx7K:G8/MZfPPmWhH9iDnYKbYiX1XNxx7
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4324 556 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\3bbcefa31389862aa36e13e7ba5d662d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3bbcefa31389862aa36e13e7ba5d662d_JaffaCakes118.exe"1⤵PID:556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 556 -s 5402⤵
- Program crash
PID:4324
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 556 -ip 5561⤵PID:2892