Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 18:04
Behavioral task
behavioral1
Sample
daf27f66152373a33b14f99e49a28ea8_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
daf27f66152373a33b14f99e49a28ea8_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
daf27f66152373a33b14f99e49a28ea8_JaffaCakes118.pdf
-
Size
81KB
-
MD5
daf27f66152373a33b14f99e49a28ea8
-
SHA1
0bc06c63b12a6b12776c4e5492a2736e2a4df170
-
SHA256
1266962bebdc3632c1ea403594258e9d9b3ca8f37cbe7262573ea79621ee30a3
-
SHA512
26b07fe2ee037d6a616592c73075f650249b2d72669bf7515619992fcc62535bafd1b33ec78a9899290b276f9b33c53475e98cd88a026f6096b1c5beb7f8a07a
-
SSDEEP
1536:3siC8ipO6O8HAw1sFX0YQ8jVq/aWCQv6jZyH1EW6pOu271KEF5I:rrZvw1AkpYkQQijZM9u2RDI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\daf27f66152373a33b14f99e49a28ea8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5afe27e32049bbe8169aec36084528901
SHA12181a26fe835b1ff276855be90bad7d7fe79aea5
SHA25681f3f8335af8c0890091f8c02364d10324c0dd170f5c96adc00bf7e56fac43d0
SHA512fbb69a74eb5757a1c1feed8475f641bbd04ffb3abb5552a0d49f2aa83a1db7209d092cdbabed2ba24d465b86b7d398667e5e16f147df5b2170af6fb891f4eb39