Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 10:27
Behavioral task
behavioral1
Sample
1fa19d9b8809e2c2e50689036357639c_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1fa19d9b8809e2c2e50689036357639c_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1fa19d9b8809e2c2e50689036357639c_JaffaCakes118.pdf
-
Size
84KB
-
MD5
1fa19d9b8809e2c2e50689036357639c
-
SHA1
971fff039ff0afec64d0c5356f6cb9e5587b9414
-
SHA256
cf7f6e104a25db2076788b7648a42fe3dff60ac307423f3efd45253e7a0269b3
-
SHA512
5a341836b9f32939709527941136b31cd4aa4322f80b22111bb2b6764d3ffd2d40b478bcae7d87d0fa45c4beda2d3779624776237bae06adfeace3839480478a
-
SSDEEP
1536:FClJVgrL7EMKoMsSwvqStedqUCHR7OtnA6AgN+pKWX4ZWbpONiWInrS8D:klonKoMsPv9t2qvxSA6VN+pKWX4bNir1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2760 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2760 AcroRd32.exe 2760 AcroRd32.exe 2760 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fa19d9b8809e2c2e50689036357639c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2760
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54529e4b31cf3907c3885475b21eaa20d
SHA1838fa9a0c750ba5dd2239bfa8600a9ef0b8460fb
SHA256474ddcc4eadebf4846b01124a73d1474e153c6a614f91ba020f97ae45cff7bb9
SHA51256802e32cd43d6c4c1bb36bdb3aa630766999866221abde0c624068852a30f974874702bd740dc925d32a3929d4671b091f35f6b47c34f13b4f9641c2901e437