Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
29/03/2024, 18:44
General
-
Target
29db7964fbd55a4a2e956ff9012eff20_JaffaCakes118.exe
-
Size
7.8MB
-
MD5
29db7964fbd55a4a2e956ff9012eff20
-
SHA1
8a1c396f019009de05c18d8f81b1477308159e2b
-
SHA256
916c743524217e12bf563236b620e7a3bb680d000ea65cc326db980f55168c3d
-
SHA512
945a3b80731041d9bc0b5bfc772aef8b9c766faae00bb25995ef3ed333975397969826921f18026380e449264a5eac41a98d212d75e7c84217c1e550814b958c
-
SSDEEP
196608:JFf3WKFTI48WrAu4EZE8Ug73SPXPZLeDeAC6fXXFcb:JFf3FFF8Zu4+UnvADeA5XVu
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\29db7964fbd55a4a2e956ff9012eff20_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\29db7964fbd55a4a2e956ff9012eff20_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19.7MB
-
Filesize
19.7MB
-
Filesize
19.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
19.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
19.7MB