Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15/07/2024, 21:05
Static task
static1
Behavioral task
behavioral1
Sample
4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe
-
Size
5KB
-
MD5
4b64d39cd04a9493b8f91be531cc6455
-
SHA1
12b59df24a5492040ea7feb9dc58ef19d4c68d7e
-
SHA256
beee99b2e821e7751cd71b1b0dc1f8ceb6068314f00933799270bedc86d3aab1
-
SHA512
27ca7a0215cb7239e409d08b7d7d589e1774ab0b99390dcf670ea79272cb7548de02e810a16f317d227cd38f56c5a0ae7f8938bebd7796fef8297916b824d6cd
-
SSDEEP
96:vtlwI1JwSqHnEn9ItJquyFW6UzR1CtReU0OFgFuYCkZUld9LI:L9KknAxybs1CtR7ew9tp0
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3064 2952 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4b64d39cd04a9493b8f91be531cc6455_JaffaCakes118.exe"1⤵PID:2952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2952 -s 2242⤵
- Program crash
PID:3064
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2952 -ip 29521⤵PID:2352