Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 09:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe
Resource
win7-20240708-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe
-
Size
100KB
-
MD5
62c2be046943638d9b9aad0d6bf5d4b4
-
SHA1
102c04002f305dcd113fa33da3f7da68aac5bfc2
-
SHA256
eca6485e2ab196a735bb1bd489067393483e8a54422b2a898a79b8ba7191ae59
-
SHA512
0bbb618acfb0d55de0064e6ba66e366cefd1477145adb46c461d6d413d22c651738c752bf9c83f2802741bcbe46ddf70072b06671cfa4211a38dc11cee3c9098
-
SSDEEP
1536:GDt0382NTdwwcLGZcYADZPU1+73BRNIjni:DwwrgZPUQRCni
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2108 2204 WerFault.exe 29 -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2204 62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2204 wrote to memory of 2108 2204 62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe 30 PID 2204 wrote to memory of 2108 2204 62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe 30 PID 2204 wrote to memory of 2108 2204 62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe 30 PID 2204 wrote to memory of 2108 2204 62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe 30
Processes
-
C:\Users\Admin\AppData\Local\Temp\62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\62c2be046943638d9b9aad0d6bf5d4b4_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2204 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 1882⤵
- Program crash
PID:2108
-