Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15/07/2024, 09:25
Static task
static1
Behavioral task
behavioral1
Sample
4931bfa03b011b1d5b0b0f8dfd4a8116_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4931bfa03b011b1d5b0b0f8dfd4a8116_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4931bfa03b011b1d5b0b0f8dfd4a8116_JaffaCakes118.exe
-
Size
4.3MB
-
MD5
4931bfa03b011b1d5b0b0f8dfd4a8116
-
SHA1
ec6c20b828d0517db89f03c3335bbc839b58ef0e
-
SHA256
ca9a3481656a749870c13d58d50a90d3e91dfb5f0324253261e699a76fd82697
-
SHA512
8ad31f059e16e33cbf82182193130bdea9f65ed775c57462242f1ce39afa74e48d3f4a63a2050f88f161d8ef43cca63a020e0f40577046aced5d2912a10654d7
-
SSDEEP
98304:WvoweBT2dUM9dIeLEyZllU4IZCVmnQocVUf82Vxuut+fmV0RgL/UG8SAOmf:WgfBx2GeQiO4IZC/9VUrzzt+fmaSMVS2
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 776 3724 WerFault.exe 82 4184 3724 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\4931bfa03b011b1d5b0b0f8dfd4a8116_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4931bfa03b011b1d5b0b0f8dfd4a8116_JaffaCakes118.exe"1⤵PID:3724
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 5882⤵
- Program crash
PID:776
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 5882⤵
- Program crash
PID:4184
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 3724 -ip 37241⤵PID:1704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 3724 -ip 37241⤵PID:3528