Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

0bda4c3a2e...18.pdf

windows7-x64

1

0bda4c3a2e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 17:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0bda4c3a2eb22ec684569a020a43ee28_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    0bda4c3a2eb22ec684569a020a43ee28

  • SHA1

    afd13897e7c3c3f57d39fc961d0f9ea3c8ecb7ea

  • SHA256

    90f0da9eab173eb449a81ef0d0e056f77ed7753ee2bcd87b5dbd191f8ca4f030

  • SHA512

    ea956502681d6cc00753d81d41d36144e3e486d475eed245c7203c3d1aa6088b03c259aa59ab6489c8f1338db7375aea84b9fd8fe89dcebf20e14e226f5f6f11

  • SSDEEP

    1536:FqrgDGa32JUS7rNgNwGCadhLJwpHBTvIYu7oukW/nqvK/BOWXpO/Dsc:k22iSlgNOa2piYvu7qS5O/L

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0bda4c3a2eb22ec684569a020a43ee28_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c1557a12ca65a1b2bc4f730c18de7259

    SHA1

    e7b985c6826c3bbf25b5c9384a57d439028c2452

    SHA256

    e9bc95df818fa72fa34bafe2529d0b4df6d3e256ce023a2bc257000e71db4687

    SHA512

    6e5363e55d852ff4ed55c1b8725edc8a7c4e8b24b52d95c37e7d5b848a68f411af7fa29f98f588a3843cf08955dc1da61b51d7419877fa546295c019ca9f358a

    Download Submit