Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 12:23
Behavioral task
behavioral1
Sample
e2891956599785f0dc889896d8aa90da_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2891956599785f0dc889896d8aa90da_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
e2891956599785f0dc889896d8aa90da_JaffaCakes118.pdf
-
Size
83KB
-
MD5
e2891956599785f0dc889896d8aa90da
-
SHA1
47483935e12f512b60b74272b61f75857b6b3612
-
SHA256
a939bea7284b45894b539498a8f62fda353db1272652f668b447c88e84bea337
-
SHA512
e6395a223890fd6e73db312f172d6e34b75bbd03e9b720ae70dc5b2e74634813ae32b0a90ef355271886cc220980527827c68cab601d0e68a70488970aa0cf30
-
SSDEEP
1536:CbC/LuljfrSHOKzHoTOblfg5GqVtzBf/FOLFiWOpOwrKWro15wcTojWG:r/wfrSHOKz2OblkLVtlFO5XwrO1G6+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1628 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1628 AcroRd32.exe 1628 AcroRd32.exe 1628 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2891956599785f0dc889896d8aa90da_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1628
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56df8389771e5b5f109f0c247729b0b1d
SHA1eb1a3127b882e61be439543a9636924771171977
SHA2560a6115252b92a748ab238ce5682e2efbb01319415e4d79b93b74afc7ef1431f8
SHA51273eee0ace16dcbb40dcb4a31135c6856bbf3df96d82e509c4daa4f96af85d870495d3a5ec6d18f128e9314d37a21da721094f751cae5ae4ad86ae7fc872cb809