Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
98s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15/07/2024, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
4b293b92490c6429bd6258c3958230c4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b293b92490c6429bd6258c3958230c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b293b92490c6429bd6258c3958230c4_JaffaCakes118.exe
-
Size
281KB
-
MD5
4b293b92490c6429bd6258c3958230c4
-
SHA1
23017875e097a9ad047fedc26e300e0265845659
-
SHA256
81443acb6f619d6e7d85c0ae4a7b41f35aad4a87c817c9bde397e329fa19d138
-
SHA512
02b47c9f2711a87a5a96224464947659608c2fb47b557cd55a392fb0808df11cb2b0a2e4e015dc2d895ded21e68aa4fc163a69fcee88bd1c8d364a882fe89820
-
SSDEEP
6144:Z1w39kuuhQ/4lj9nywgCUlR0QnL+DHzJusOBiFTdxyAK7KB:HwN+7ywhUlRJexOmJoAK+B
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1748 4392 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b293b92490c6429bd6258c3958230c4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4b293b92490c6429bd6258c3958230c4_JaffaCakes118.exe"1⤵PID:4392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4392 -s 4882⤵
- Program crash
PID:1748
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4392 -ip 43921⤵PID:3780