Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 05:06
Behavioral task
behavioral1
Sample
cba37db690aab2738c74fe77909b69a9_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cba37db690aab2738c74fe77909b69a9_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
cba37db690aab2738c74fe77909b69a9_JaffaCakes118.pdf
-
Size
83KB
-
MD5
cba37db690aab2738c74fe77909b69a9
-
SHA1
31ee4745991127e62e40810fa69a140abe2b3ddc
-
SHA256
4cf35a075787fe37671c341674bd5d728d64c8ce6429558366e6760a667ef6af
-
SHA512
ac7585d5c65423916936c5bc9a08ecfd9114b56afaae38ab74a96dcdf7894569e157878e99ccd148db7fd643ae27a1341d0c944802ce56aad98b604362d1e374
-
SSDEEP
1536:PqR5VP64UijlqZEb69ySkhBGvNLNsGt9xunQWqWxApOGzWz4g2Dm37iqp:SDVT4Eb6JQovNLV9xunNP3GS4Zm37N
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2936 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2936 AcroRd32.exe 2936 AcroRd32.exe 2936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cba37db690aab2738c74fe77909b69a9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d4f8fd3e36ba692c6a9007d8170252f3
SHA1abf4af6ee635e254dbb52e4085d3d5aa7512f3b1
SHA2569af91584042f40be5d56fed6b4ea55f05831a1b8d794b7c8be34107f57dd7001
SHA512d3b6f9d588543f97b8e5f710146f4b445b9d9c37d238f13dbffb336cce2f20455adf11ba490750a5d448217523cff6a105f1b905a8864ff6436d96e9f65ff39e