Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 18:45
Behavioral task
behavioral1
Sample
0d3770001a39ae056643be4e8f6f7a78_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0d3770001a39ae056643be4e8f6f7a78_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
0d3770001a39ae056643be4e8f6f7a78_JaffaCakes118.pdf
-
Size
74KB
-
MD5
0d3770001a39ae056643be4e8f6f7a78
-
SHA1
128b5df6d689c8765c001868422706f77e73c1a2
-
SHA256
ea6c5ac297fe713022262835c2c5028b5d0e37b7af9e2a2880a25c5edf4978e6
-
SHA512
264d4249b3aeb1a6d0befee7ffbdac1b93ad7b5210082e40c339b0d7c0744fbe1788f81b14336875a4e18d35d68cd1c69bd2400a54c292a4789c3007b6786567
-
SSDEEP
1536:4mZqoh4Z7WnIXIEFb/uLiGj6q8dQWWypOlWWxP+LemiOZyLOP/d2q:vZyZ7Wub8iGO90lDP+Ler8Y+/x
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1204 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1204 AcroRd32.exe 1204 AcroRd32.exe 1204 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d3770001a39ae056643be4e8f6f7a78_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1204
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57bda1ba964c1db515080fd4e6941d144
SHA16ea1b5e579cb77769acb551f2610a4e8d182756f
SHA256cae8dd99f998572cdaaeed729e2bc84500e62efe155a8ba68747ffc56e4fd1c7
SHA512ee55893ca345d80edb75437511d0c722f3801ac734f60d551527e0e9975e1a085d388fab7c440d87e63e424cba08b751e2c44484f66d7c5f85bc136ac70eef8f