Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 00:06
Behavioral task
behavioral1
Sample
c56ee50e1883edfe125872681a7bd034_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c56ee50e1883edfe125872681a7bd034_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c56ee50e1883edfe125872681a7bd034_JaffaCakes118.pdf
-
Size
78KB
-
MD5
c56ee50e1883edfe125872681a7bd034
-
SHA1
d97035dd0b472dbdf55e45f182d99568ab7b784d
-
SHA256
1ec8c505ea286ead34fa5f22cdb8121b06ac6341bd5d3f1387562a42350a2bda
-
SHA512
f1b32dae8b0f1bb2cbbade6c907f52d5444ddfc0734f15a201f4cb08c043a4575ddd602dc5494b3c5f5d34a37edd63087b64eb77ddfd7768996d3fc3b3bf8148
-
SSDEEP
1536:3ayzQ0OxetUTMjfj3ftczEWswxTSk45X8WUXL79ZS+2d+aHX/WspORjCECCE3T:/zdOxeaGfjPtczEWH0kfXLh4+/aHXOR2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2100 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2100 AcroRd32.exe 2100 AcroRd32.exe 2100 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c56ee50e1883edfe125872681a7bd034_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2100
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59ea41ae30593de9eb81e2aa95e9aab1b
SHA123047368db6264d5d5309cdc21d04ece4221f15e
SHA256a84e530f268a97896b96d155aec471c9658b105434498b0d1a79e89356b7b4b9
SHA512c3fcabfad5cb7003774616b903089031889a54f427e39e97c5a3fd1d676e06ffa7b53da1bfe3bc1721fb69142307be397643653a53f60584da3e2086cdf0245f