Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 14:59
Behavioral task
behavioral1
Sample
08a1e596f02842883fe2ea46535fb1bf_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08a1e596f02842883fe2ea46535fb1bf_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
08a1e596f02842883fe2ea46535fb1bf_JaffaCakes118.pdf
-
Size
78KB
-
MD5
08a1e596f02842883fe2ea46535fb1bf
-
SHA1
6c20e298c20899bbe2e9ad90ebccf2cb3917ba86
-
SHA256
0365ab63b7dd57ab80d073c6acbfd46b5b0d03734c947a61839ac2a575472316
-
SHA512
6353bbaa62084f92998c55cabb199c79f5285002b3917f89417ba4f7d28bb6c9ff13b19389de58130aca30c08e41d8575b6514d7c985b78b251878ff3251edd4
-
SSDEEP
1536:c7SI2idNwAhOeIfycnRRMdorRC1AFAC9fRKWMgz151RW8pO7CXK:PIVdjn6RRBC1AV5Nv1I7H
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1260 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1260 AcroRd32.exe 1260 AcroRd32.exe 1260 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08a1e596f02842883fe2ea46535fb1bf_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1260
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD584638afa4459cf27000f8acb5c3aad30
SHA192aab621ce41c29363736df3a631085d3086bc32
SHA2569169145bfdb353f815248187837d76d6899a9a53c1bd5434e5423df4c4310ae5
SHA512512d09622787fced9954ca8b34ef2d3bd04f7ecae0e0809969b84cce64280161060836d970fd40698b4ae1eb09fdb98ca5c1df727d0b460490a517a172bf52cc