Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 12:31

General

  • Target

    05a4eb61bea75c2d17da7605c6b98d34_JaffaCakes118.exe

  • Size

    1.6MB

  • MD5

    05a4eb61bea75c2d17da7605c6b98d34

  • SHA1

    5a83dc12f4bc2cfa77d2b10b593bce66d1e8e62d

  • SHA256

    881915687403750d390433879ac44b66ec0c498a1229e347c17b4bc1a00d3f7c

  • SHA512

    52a92bf96f3e16275b8906b588adfb08315ba5f1295413b2914438694ad826f13ac6c49b2a0e5868519796e90f566e1367c564adbab490220b75444b944d8659

  • SSDEEP

    12288:kIq2w3/b4Mph32oihrv6vNb/1oLfjQw43sQVtX2:kIs/MMpd2JZyNb1oLfjz+Zm

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • NSIS installer 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\05a4eb61bea75c2d17da7605c6b98d34_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\05a4eb61bea75c2d17da7605c6b98d34_JaffaCakes118.exe"
    1⤵
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7zFM.exe-

    Filesize

    2.5MB

    MD5

    5fc5be0cc59422c970197f49e768d163

    SHA1

    de2219bc5da2ab487c0e7d5e0ef45b42788ed263

    SHA256

    8768004a2a2fc3b18a9854587774ee365a298223945b8f175d102723b9b5b12b

    SHA512

    ec1c9896da38ea3b854365a1c24ac997e92fc659af3bf0419aaa9d1169af222c44f2989b9ce272ec013969aa8c78812466e07c4b1ae415aa24e16d33e5f3552e

  • memory/2184-0-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB

  • memory/2184-3673-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB

  • memory/2184-3677-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB