Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 07:49 UTC
Behavioral task
behavioral1
Sample
df4a7011f9e91f34980e8ff8032a76b7_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
df4a7011f9e91f34980e8ff8032a76b7_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
df4a7011f9e91f34980e8ff8032a76b7_JaffaCakes118.pdf
-
Size
95KB
-
MD5
df4a7011f9e91f34980e8ff8032a76b7
-
SHA1
1f91be7ced63cd7d17672b6a144bce1343dec1d6
-
SHA256
12b7523c00f4f34fe2dba90ecc8ffb7bec009f600d6a0308f7ab1542ac1b72a9
-
SHA512
94d23d2dea74d03f9bf9d383114c1540b9f1bb121a2f4e171d89f5c76d337e13837159838f12bcdc49f8a528bff95043758c571f9819c280317293cb1e85e72d
-
SSDEEP
1536:gBFGEbtWpkkDgnNE6qIEIdoAgFp4nlwTTeNdnPvfZg+eIb3YRo6bTRvirWypOlLi:aF3WvUodIdobFp4nlwHGdPvhgpIb6Ra/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1708 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1708 AcroRd32.exe 1708 AcroRd32.exe 1708 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51214fba1e5a4b03dfe3a274b22d9416f
SHA1a3641b9335e768a0f9ea14c712fcdcd1bc3e5b09
SHA256f845b1a63c68655a74cc6578f9d3eba062314e6db7fe49507561377ea20836e3
SHA512b9feea51f543255556da5ef74381a67362580ae3870ca72462d26b5432d9e5ea86046bb35701cd30c0a14faea2738a6c5c436599498d5f46f39a42b74246392d