Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/03/2024, 03:42
General
-
Target
177e8de838cca2b3d4acb49bc3b50ae2_JaffaCakes118.exe
-
Size
6.0MB
-
MD5
177e8de838cca2b3d4acb49bc3b50ae2
-
SHA1
5a92181ad9964ae8a4f8858646402f547570e425
-
SHA256
11f80a231bdb490903e827855b9017aefded7bd84cea082f4f7420dd20b817eb
-
SHA512
9c0a9810dbd02f82c6679767d34aa6b9ddcb3abccedce6367c1d78fbcec8463c6e011be95de14807d5e4b96e336644903f0140f508cd9ba9cb9554c5ec6e41c3
-
SSDEEP
196608:xyHuqVqNpKTaHMr29wTS+OVCUsjSFRWcCf7:8XVOpKTv2+SxtssED
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\177e8de838cca2b3d4acb49bc3b50ae2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\177e8de838cca2b3d4acb49bc3b50ae2_JaffaCakes118.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
4.3MB