Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19/07/2024, 23:45
Static task
static1
Behavioral task
behavioral1
Sample
5e314ee8ee20fd3efcf290b82e022c61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e314ee8ee20fd3efcf290b82e022c61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e314ee8ee20fd3efcf290b82e022c61_JaffaCakes118.exe
-
Size
96KB
-
MD5
5e314ee8ee20fd3efcf290b82e022c61
-
SHA1
468b26a52fce59c5fb15ede2b145d18cc4585db7
-
SHA256
178c8557b31b537ee8dbd65af61e767533f6b20b49e90dc5d223bdcfae0e53a7
-
SHA512
c2259cc7a23d4792f68355170582749b40504d16f461800ba67daa8a01a6ce2310544c9ff998d47f248a4735bd0668f366227386ec229286f5fbc88498052bf9
-
SSDEEP
1536:WyZMSZFvknTePMZd4k4kJJs4Romu/gEJ4Ar:xZMJnTeM4cJJs45xc4e
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
pid Process 804 5e314ee8ee20fd3efcf290b82e022c61_JaffaCakes118.exe 804 5e314ee8ee20fd3efcf290b82e022c61_JaffaCakes118.exe 804 5e314ee8ee20fd3efcf290b82e022c61_JaffaCakes118.exe 804 5e314ee8ee20fd3efcf290b82e022c61_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD5254f13dfd61c5b7d2119eb2550491e1d
SHA15083f6804ee3475f3698ab9e68611b0128e22fd6
SHA256fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28
SHA512fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7