Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 22:45
Behavioral task
behavioral1
Sample
11e0b466d52e2d751c6c80d43525b1fb_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
11e0b466d52e2d751c6c80d43525b1fb_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
11e0b466d52e2d751c6c80d43525b1fb_JaffaCakes118.pdf
-
Size
86KB
-
MD5
11e0b466d52e2d751c6c80d43525b1fb
-
SHA1
c09acbb829ef98adf9221daba5486804af8c55b6
-
SHA256
dcfdf3f8ea00db8269689a7fba24ec884a5fa53083a63fcdf2ccad7072da88df
-
SHA512
e25e9c08f1877e953e8a2838b99283d63509e9dd8097110c04756f9e94a9395c89bd3b2651fa40d36cf7412e794d9ba1ab16e78c82b36d6b4ec8d67ed3067ba3
-
SSDEEP
1536:SSWnfIz5KewijvEY9Hjj+aac1tmpF1rWWypOlWWxrRyb5cKBvlprY:T+fI9KeJjj+aKv1r3lDrRyNc6vlW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2012 AcroRd32.exe 2012 AcroRd32.exe 2012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11e0b466d52e2d751c6c80d43525b1fb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD545b6435c8ab1cf72e6600a21554e3198
SHA1c973a5eebe6278a2b90b590bc76128bc077945b4
SHA256f163dec728c91064d27a4669df5e26afd898d513614e94da629c72beda3a31e8
SHA512a4a5927a52409f5a5637d1aaa9306a317182d17e64cbccc8e631830c58878b41bcd9e0a9f031c7de4668174d92d1bd0f081acead76753b1abe96c16b9b6463a4