Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 15:56
Static task
static1
Behavioral task
behavioral1
Sample
3e04a7002744fe584511b2055972cdf3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e04a7002744fe584511b2055972cdf3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e04a7002744fe584511b2055972cdf3_JaffaCakes118.exe
-
Size
183KB
-
MD5
3e04a7002744fe584511b2055972cdf3
-
SHA1
6bd417fd806bb9d52f7071e984dc19dcbcf2a4b4
-
SHA256
8aca7bb5bc16c34da62cfc60df950d530522ca0a8880e17fafba00bfc1ca462b
-
SHA512
4d5fcc96bc6dfd1e63153755372d5e86e4e8cb1444e52d664818a9204299f2497d79b7b80ad218567f4b67d94fd6e4f931396710eb57bac6e5e36e34d17cc5a9
-
SSDEEP
3072:ej/j2UdMHc/hgLsmxs9NlSpQT1ljph1VdFC7DM/0Xuqg3RlIF5Xd5:ej/j52GV2a5hO7k0Xxg3f+
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2156 5056 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e04a7002744fe584511b2055972cdf3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3e04a7002744fe584511b2055972cdf3_JaffaCakes118.exe"1⤵PID:5056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 4842⤵
- Program crash
PID:2156
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 5056 -ip 50561⤵PID:3268