Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 12:37
Behavioral task
behavioral1
Sample
d3e4fe7632d84f9db2942f80aede3616_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3e4fe7632d84f9db2942f80aede3616_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
d3e4fe7632d84f9db2942f80aede3616_JaffaCakes118.pdf
-
Size
79KB
-
MD5
d3e4fe7632d84f9db2942f80aede3616
-
SHA1
6007bdfc302d17d9a10442bc7c777e666b364338
-
SHA256
28f9f92d923fb2b84adeee08b48b91bb6b7b49a38611c697c58c40cdf56a71b3
-
SHA512
8b7c00f6a816b4d19d69df7515e1a67d679c5d98e34505f3a18352e1b6f44806e8629dbd146cfab545131c1062bacd946656407d66c7112ad60544b8952bb978
-
SSDEEP
1536:62U4sVWgsHayom4aYyMUkUzn2mk2I4CyG1DAUbet7MWapOtQHW9eLer2/3y/ImKr:BhsVq6zafPkCotTBbbentQgd6/RZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1928 AcroRd32.exe 1928 AcroRd32.exe 1928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3e4fe7632d84f9db2942f80aede3616_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD537b855ccf236d42dfdc61a3129457ea6
SHA1f93f81cf32e835337c5c39285e3656d0e6c34b3f
SHA25652a0f86f3ca1fb6442b185dadd4dc3f52ab400bee2120e476341fda9a4bb14b3
SHA512a5c5d4f9bdc77633036131e749a1aecc651a4557bddc574e428329dd5931c59f887e81cec0488845a29652829d23d9655e05337e1bacd3957ae6bb27f6310ba0