Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 06:30
Behavioral task
behavioral1
Sample
dd97392410a74ac9493240bb38732ceb_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dd97392410a74ac9493240bb38732ceb_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
dd97392410a74ac9493240bb38732ceb_JaffaCakes118.pdf
-
Size
95KB
-
MD5
dd97392410a74ac9493240bb38732ceb
-
SHA1
a006bb848341de96e55851effafa45b6fee1dc15
-
SHA256
1531097059c675c7f74f149d013a5f2520a13bc0fc7ef07df7ffa7fdfcb46497
-
SHA512
c34a4a9246088aeb023fcd228aef57938a1412ff272be190070187b4d8b429a9d998a40adbb94999231d50450b8d1613e31d2abc1064ea278318c3e41bf19cd3
-
SSDEEP
1536:PmE6Mw9QHvnh14F1njPzy8APbDRq3I+aqr0hxwyUvvsboKWapOtQHWFp2Ox8++F:OE6RQPX4LHH+0aqrGxwyusbo3tQ8p2EK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1972 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1972 AcroRd32.exe 1972 AcroRd32.exe 1972 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dd97392410a74ac9493240bb38732ceb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1972
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5980f9be8cb12c10be528421897e886e5
SHA1c2f9f21413b44deeddfd40eb12e16d1889b3413c
SHA25624c128f075ffa498608f4162e859620276f81eda6be61f2bd795f40d0f799f01
SHA5126586edc9c0cc58a28ea388800dc876162be93546fb3de36027b9086c9f54590706e486491e1230a6b46e0070f9824c193400fef7e36ef36998ce51fc754fd75c