Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 09:50
Static task
static1
Behavioral task
behavioral1
Sample
3ce34cd6be31ffd7f165700ebe220c07_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ce34cd6be31ffd7f165700ebe220c07_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ce34cd6be31ffd7f165700ebe220c07_JaffaCakes118.exe
-
Size
162KB
-
MD5
3ce34cd6be31ffd7f165700ebe220c07
-
SHA1
b5a9821960bc63957ce2855562d7a4524ef04371
-
SHA256
04bc88ddbbf3d087002c780ed47cbcf5b3176c26d266e3a56870c3de47a6f08f
-
SHA512
1ccaa2e25b664a3bc92ae6b3d6643c4fbb1ff1c3035e9208503bff9ef9a759a624e8a8611c0afc45daa9e0e6c7f58e2e28ffa1b225f91f2b38d73efd667856fd
-
SSDEEP
3072:AHOef1VXAuD1fY8Z6iLMDzK5YMwF9fCUFgvYrrsnTFADdWdvdpa80DSCegqTX:AHOesu1S+MqyMwFRCUFUYroeDdK+fpeV
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1188 4776 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ce34cd6be31ffd7f165700ebe220c07_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3ce34cd6be31ffd7f165700ebe220c07_JaffaCakes118.exe"1⤵PID:4776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4776 -s 4802⤵
- Program crash
PID:1188
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4776 -ip 47761⤵PID:3436