Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/07/2024, 15:56

General

  • Target

    3e04a7002744fe584511b2055972cdf3_JaffaCakes118.exe

  • Size

    183KB

  • MD5

    3e04a7002744fe584511b2055972cdf3

  • SHA1

    6bd417fd806bb9d52f7071e984dc19dcbcf2a4b4

  • SHA256

    8aca7bb5bc16c34da62cfc60df950d530522ca0a8880e17fafba00bfc1ca462b

  • SHA512

    4d5fcc96bc6dfd1e63153755372d5e86e4e8cb1444e52d664818a9204299f2497d79b7b80ad218567f4b67d94fd6e4f931396710eb57bac6e5e36e34d17cc5a9

  • SSDEEP

    3072:ej/j2UdMHc/hgLsmxs9NlSpQT1ljph1VdFC7DM/0Xuqg3RlIF5Xd5:ej/j52GV2a5hO7k0Xxg3f+

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e04a7002744fe584511b2055972cdf3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3e04a7002744fe584511b2055972cdf3_JaffaCakes118.exe"
    1⤵
      PID:5056
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 484
        2⤵
        • Program crash
        PID:2156
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 5056 -ip 5056
      1⤵
        PID:3268

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads