Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 18:24
Static task
static1
Behavioral task
behavioral1
Sample
3e65452873d9d09bbd4794c633972f12_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e65452873d9d09bbd4794c633972f12_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e65452873d9d09bbd4794c633972f12_JaffaCakes118.exe
-
Size
161KB
-
MD5
3e65452873d9d09bbd4794c633972f12
-
SHA1
ddfcf825f4691702645dab77b32f223049f4c428
-
SHA256
c97ecae2bfa1ad41ff9dc66446474049c97fb16c9bd6bee179ffec6c5b9829ab
-
SHA512
7552aff0c15c97b29dd7895e4b0d4c318e99957e127dafd2413a073332d6a2d7282506d2fe3e84abb770ad385f5e2093e2575c56eede0c028aadd6adc67cb985
-
SSDEEP
3072:s0Tm0uv4chWaXqEFoPLwjDRIXwwM1/Yif9qIkxltjEK/glf6bu:s0i0uv4kzD0wJAif7kNb/glf
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3096 4320 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e65452873d9d09bbd4794c633972f12_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3e65452873d9d09bbd4794c633972f12_JaffaCakes118.exe"1⤵PID:4320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4320 -s 2762⤵
- Program crash
PID:3096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4320 -ip 43201⤵PID:2924