Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
112s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
14/07/2024, 15:37
Static task
static1
Behavioral task
behavioral1
Sample
46724aa27302f89e8f75b562aea43c1d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46724aa27302f89e8f75b562aea43c1d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46724aa27302f89e8f75b562aea43c1d_JaffaCakes118.exe
-
Size
249KB
-
MD5
46724aa27302f89e8f75b562aea43c1d
-
SHA1
9069b0e2cd42930eba37e41287dbda422d22a857
-
SHA256
d47ffc7f0f904230f4c6cb9f3ebf59b7b5ee5b8c5668233e7ca3e78613b58844
-
SHA512
7a318448269e0dfae6c0d4650dcb028a32008c7a32d9b5e281b4f7e0380bfb3ba362a0e3419d71b11678d36f4af3fb7ce214671f768e0085bfeab008682dca56
-
SSDEEP
3072:PP/YWl0zCNuV8L1IOF2LNOITmptmxb/WNaMF19oTg7WRqDf5EsPlBAc:nwzCNg8BIOF28ITmptm0/DGAhFNBp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2788 2192 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\46724aa27302f89e8f75b562aea43c1d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\46724aa27302f89e8f75b562aea43c1d_JaffaCakes118.exe"1⤵PID:2192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2192 -s 2602⤵
- Program crash
PID:2788
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2192 -ip 21921⤵PID:1856