Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
16/07/2024, 04:48
Behavioral task
behavioral1
Sample
4cdc27b92e0c36c588d19cc5b9cc5816_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4cdc27b92e0c36c588d19cc5b9cc5816_JaffaCakes118.exe
Resource
win10v2004-20240709-en
0 signatures
150 seconds
General
-
Target
4cdc27b92e0c36c588d19cc5b9cc5816_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
4cdc27b92e0c36c588d19cc5b9cc5816
-
SHA1
2dc1522d7ac37aeefb5c8daa99edb8453154b65c
-
SHA256
75450682a2b49c62053ddad59afaff1beb9d75159305e21a0b118f79612acc0b
-
SHA512
f44cb0a47301228fbdc6b9fc4ffdf53e490bbdb7b4e310d1cb356ffdfae7932b95603079f43212ec1031b3880916e409571932e7f502a2dbed38b64c168f9d65
-
SSDEEP
24576:PjRfMMxLHZoX14XOMgkas/L4YmymYsZOR4mUmTlNghk8zBxchNenqfw:Ptk6HeX1Jk/LkyZsZORmMghFt5k
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2764-3-0x0000000000400000-0x00000000006AB000-memory.dmp themida behavioral1/memory/2764-4-0x0000000000400000-0x00000000006AB000-memory.dmp themida -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2764 4cdc27b92e0c36c588d19cc5b9cc5816_JaffaCakes118.exe