Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/07/2024, 00:09

General

  • Target

    5e447370c95b1efcc2e617bbf73193f0_JaffaCakes118.exe

  • Size

    54KB

  • MD5

    5e447370c95b1efcc2e617bbf73193f0

  • SHA1

    16e5cb46ca334a81277bb97776dd3aa96f54597a

  • SHA256

    014a57e91c278a92dbb5691247de9aeaac9a2675e7364ad316c25702e511a16a

  • SHA512

    c8cf7845cd768a8ac8b0dc631baf2e35bbfd51e2c0f70118ba83b0edb73f7c7f8a2907cb374f37344bf6382431f9e8ed5b3cda8c4cc29a2351fe571f1db08b3f

  • SSDEEP

    768:1fw5t+uornkXiVjs5l7JAzR8B9jd/DxnrLINGdH8asrsvnrLINGdH8asrsR:1Q+uyVjsMR8/dLxrLvMQrLvMA

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e447370c95b1efcc2e617bbf73193f0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5e447370c95b1efcc2e617bbf73193f0_JaffaCakes118.exe"
    1⤵
      PID:4684
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 224
        2⤵
        • Program crash
        PID:4864
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4684 -ip 4684
      1⤵
        PID:3500

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads