Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 08:27
Static task
static1
Behavioral task
behavioral1
Sample
3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118.exe
-
Size
179KB
-
MD5
3ca6b8dfdcc8ed3be11e97a4d4b91307
-
SHA1
ee4dc48655fa2f2a93e55c95c43bd2c287359164
-
SHA256
43e28c125a63571f9ef25873b07c1746166e0404f386dce462cfc2b8b27f6551
-
SHA512
937eac19ba251a4a98f38e8f7398cdfeeb6cdc8720e3a081a78a8d0780ddf24c85fc8708828858d0ba3cb6b5e8e6a15d198618a6a484e336711395c2ee140300
-
SSDEEP
3072:ZOl+3KP6cwD4csJOTfWq9wCA/NcYJwR94tLxEElKFZxuoSbn1ziguuYT:L3bVD+4WqOCAIy5xHL1zLu/
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2388 3296 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3ca6b8dfdcc8ed3be11e97a4d4b91307_JaffaCakes118.exe"1⤵PID:3296
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3296 -s 6322⤵
- Program crash
PID:2388
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3296 -ip 32961⤵PID:3288