Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 17:12
Behavioral task
behavioral1
Sample
0b632d3405c2dea5d1b78064d1a9da8a_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
0b632d3405c2dea5d1b78064d1a9da8a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0b632d3405c2dea5d1b78064d1a9da8a_JaffaCakes118.pdf
-
Size
81KB
-
MD5
0b632d3405c2dea5d1b78064d1a9da8a
-
SHA1
9f3884d019f05a2ea65735945ccb720c32eb80ff
-
SHA256
e3893c31c118104af4cbd44b4390c5b96e3483e010827f5093af92c1b0a0404d
-
SHA512
447d8e3c16d6d2431f86ae672c9584e1d15a8d7493eb94035c0cacfb9c44c6ebf126dd16cb08bfeba74869e1c9b308e91193f71d29cc18b530300a95ad112808
-
SSDEEP
1536:ChiX/knDHbD0dtKgLFJ0duXYr+1WCZ4QcIdlB181KWXPkWspORj97Qy:Nuw1LFSgX++luQPvv8hXPfRB75
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b632d3405c2dea5d1b78064d1a9da8a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51c8932da3672219dafebe3b14e0c42c6
SHA180d57b4f2d09169a0698e9d3f934065a5ffcd582
SHA256a8febdf32ff9c02d22f74ac0ef262274d099522b97b133759b4cb0420d01e105
SHA51236f8e5091a977a26161445f8dfdb1c3043898656fe8da6575f96be2b1b5e32ce4bc8a22906d9e833e60e56b5b6f0535e863c2c69d20d92249f5f555dd6a17ac5