Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2024, 07:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2ce0609d3a75f9a3b919add1042f9d6d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
1 signatures
150 seconds
General
-
Target
2ce0609d3a75f9a3b919add1042f9d6d_JaffaCakes118.exe
-
Size
416KB
-
MD5
2ce0609d3a75f9a3b919add1042f9d6d
-
SHA1
94b41b350e217e603df248e6220093752ccd1fc4
-
SHA256
544ffb28d6f87b843deb18aaeb9fed0321f742251e7ddce80ed4aa9a015784a2
-
SHA512
c03ee644429e57ee46fe2108dc39f54d799d606a0b0b3246182d5f95e892fe78930c5629c8e5af90872fe4d8f9b04fa30d1249c7299262d8f8e3e29dad089f05
-
SSDEEP
12288:IHC5UNRRpg2Pg0WNbULFOKQNOytw2tYL5iD:IimNRR+gWlURCOya2uC
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1664 2496 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ce0609d3a75f9a3b919add1042f9d6d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2ce0609d3a75f9a3b919add1042f9d6d_JaffaCakes118.exe"1⤵PID:2496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2496 -s 2162⤵
- Program crash
PID:1664
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2496 -ip 24961⤵PID:4716