Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
13/07/2024, 21:54
General
-
Target
437d1001420d2340d7402631e13ac76b_JaffaCakes118.exe
-
Size
27KB
-
MD5
437d1001420d2340d7402631e13ac76b
-
SHA1
86cce9b7dd4ffb984de0a50a792fc156e3e9be07
-
SHA256
e298efa021e4e31bf109d50087a70346a8b5dfc3b99a22abc06c893f071703b0
-
SHA512
53c9c378e5cf9fec0f38bdeca8732667f1c6963825131fa68552aa45c8cefccbed187d3d8905517373ecd4e522073587f5b43583db6c39cdb9af3076b9f031ae
-
SSDEEP
768:DYL41akqnY999999b6m99999DM999gORrmGR3f15uc:DLak/999999b6m99999DM999tRJ3f14c
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\437d1001420d2340d7402631e13ac76b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\437d1001420d2340d7402631e13ac76b_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\437d1001420d2340d7402631e13ac76b_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\437d1001420d2340d7402631e13ac76b_JaffaCakes118.exe2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3444 -s 4603⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 3444 -ip 34441⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
-
Filesize
12KB
-
Filesize
12KB
-
Filesize
10KB
-
Filesize
32KB
-
Filesize
4KB
-
Filesize
32KB