Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19/07/2024, 10:28
Static task
static1
Behavioral task
behavioral1
Sample
5b8cf8cc55b8e0d048e7e373132d7d3d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b8cf8cc55b8e0d048e7e373132d7d3d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b8cf8cc55b8e0d048e7e373132d7d3d_JaffaCakes118.exe
-
Size
627KB
-
MD5
5b8cf8cc55b8e0d048e7e373132d7d3d
-
SHA1
fffd14e644f87aa354f9003ea6418c193d27aa43
-
SHA256
41fe9b8316d5a782713a11a5eeafde32ee9e42bc27a4ea4b49e2e69baba57d07
-
SHA512
45e34d1d079febdd66a56fca22c746bb3562fcb717de06fe47ac77744f05e4c8e77297002f3568c2c40610a032f4cf61f50d3d55547fe0faf7b338fafbbc0355
-
SSDEEP
12288:RxpNWAGPBelccX+01JO7JY2QYrs01wOEk6+4nOcnDcPRnMp2S:RxpNWLPBelccX+01JAJYpv01wOEk6gcD
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3084 5b8cf8cc55b8e0d048e7e373132d7d3d_JaffaCakes118.exe 3084 5b8cf8cc55b8e0d048e7e373132d7d3d_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3084 5b8cf8cc55b8e0d048e7e373132d7d3d_JaffaCakes118.exe 3084 5b8cf8cc55b8e0d048e7e373132d7d3d_JaffaCakes118.exe