Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2814e4bc48...18.pdf

windows7-x64

1

2814e4bc48...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 17:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2814e4bc48f1209167f5a3c903e418d8_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    2814e4bc48f1209167f5a3c903e418d8

  • SHA1

    f77b53bf091e3b9a987ddfae45b3118d67d2af1a

  • SHA256

    aedf4058e412e564630a2d969e8c4d68d55a8a9f7e4e91428fbdc3c6a6a4e010

  • SHA512

    0e75b94a8aa6993cd2416949ecfa08bb0734674f2beb2dd04a9e1414446d5595c88c99d7a6070fdf4dc50e063246a6485347c9731a21c54d64d26d7a8edb3265

  • SSDEEP

    768:jRQ9XQYcbZFS3Yrazkxlrxc+koNVHjkizy7k8vK:1mAYcbZFnmhvoNNjkizmK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2814e4bc48f1209167f5a3c903e418d8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5964af12d8c72326cd8fce98ab11a5c1

    SHA1

    efc17693e284880dbe33b729717767143194ef59

    SHA256

    9267a13385c5dfff9d50c5b20073fe6f89945cf0f89900760ac4098942792cc8

    SHA512

    0a8a0d4e675b26d8c1c05e797ce52b9c40d92d4a6d1bffe0e8c3f4be357dd108d2648bb61a583dfb2777573fe58825275863fd7da862469475b3e0ea6cda9654

    Download Submit