Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13/07/2024, 18:31
Static task
static1
Behavioral task
behavioral1
Sample
42d89e616fa15f6217ac7ffe838860c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42d89e616fa15f6217ac7ffe838860c7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42d89e616fa15f6217ac7ffe838860c7_JaffaCakes118.exe
-
Size
173KB
-
MD5
42d89e616fa15f6217ac7ffe838860c7
-
SHA1
9aa7f6d4eae7ba0dc3c5ccf0ace9118f4ad2cf99
-
SHA256
58c93631d1df5b094851b0a24a5a34171175ff494e3b4b21741a48a6f19bc9a6
-
SHA512
66a44fb0c2dbbf1040136c7c9d3a126a23de0a0dc85901269834ad918c1ca22893195b36b93c581204cb674d0fef56fef7332defe728ef1879bc9d5dbd4bcf6d
-
SSDEEP
3072:JkJhBXR2UIE8gUSp0VhshedZlfs1K6xj8z9Vc/2N3/bCO+RACmAu8f4:JkjxR6N/xE1VAueNOO5C7u8
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2916 3912 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\42d89e616fa15f6217ac7ffe838860c7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\42d89e616fa15f6217ac7ffe838860c7_JaffaCakes118.exe"1⤵PID:3912
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3912 -s 3762⤵
- Program crash
PID:2916
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3912 -ip 39121⤵PID:4888