Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
20/07/2024, 04:27
Static task
static1
Behavioral task
behavioral1
Sample
5f05977fa039dab76e94eae857888ef9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f05977fa039dab76e94eae857888ef9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f05977fa039dab76e94eae857888ef9_JaffaCakes118.exe
-
Size
364KB
-
MD5
5f05977fa039dab76e94eae857888ef9
-
SHA1
e7be6f93d54efa29c51fa17ecb631bfe013d54b3
-
SHA256
ccffc48c6a40f652e8fc85adbc88bc868fea5b7fd0370f25490bf64c19751cc8
-
SHA512
4e2e1b82b67d087a86caa684a020ac59108de453d3cac6a185d674108ec3ad003156dafa35f80e3be9fe44bc2585610cc98dfbecfd3775cada21cebfc47a52a6
-
SSDEEP
6144:nbCdh+yzFFSIX0zE9NKFEWNFfK4CS0NwIx2+fFBFFrki9:nmd0WSIXxcXNkjNxZf1Frh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4844 1060 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f05977fa039dab76e94eae857888ef9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5f05977fa039dab76e94eae857888ef9_JaffaCakes118.exe"1⤵PID:1060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1060 -s 4762⤵
- Program crash
PID:4844
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1060 -ip 10601⤵PID:3012