Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 07:35
Behavioral task
behavioral1
Sample
cd863daeac7bd5d7528364ea015028b4_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cd863daeac7bd5d7528364ea015028b4_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
cd863daeac7bd5d7528364ea015028b4_JaffaCakes118.pdf
-
Size
78KB
-
MD5
cd863daeac7bd5d7528364ea015028b4
-
SHA1
06ddc688b70420fa2835843c66584b63ec53df5a
-
SHA256
6271a5229b36da84a71b113c7fda38d6766e8b08a562c1deb2d0b7a484da911a
-
SHA512
cba3bda22f212558702788e40ecb5e3b60b83b6225bcf98d38a29ac1388c2b1eecb08257ac30ecb0ec60fd4618164341556834ab24d97ba53daaae53790d7627
-
SSDEEP
1536:AjnniqTvUjGh/IdrqetNpu2BXLyEcdLVGySfPS0pWx8Gx0zLJWapOtQ3YF:wni7jGydWetzu2dLqVVGFfbIEmtQe
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1636 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1636 AcroRd32.exe 1636 AcroRd32.exe 1636 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd863daeac7bd5d7528364ea015028b4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1636
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD502bb76a3e29b127e25d21f30a5c1e769
SHA1c9ccfbd8153621515bb2c956ae4626bdc47720de
SHA256bb5abe80f0938c6842ecf7213b2323981b1bba88f61625ca765395df6b091262
SHA512ad7f4f678796e5a7d3cd702958ad10e70e40a4fafce8db5bfa53e99c539742895cc510fbd086421f31639529d92bf3f6b651d238912faf02d5641e2012729afb