Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 22:07
Behavioral task
behavioral1
Sample
e887d8ff084903de1e9fb3dd93a7748d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e887d8ff084903de1e9fb3dd93a7748d_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
e887d8ff084903de1e9fb3dd93a7748d_JaffaCakes118.pdf
-
Size
84KB
-
MD5
e887d8ff084903de1e9fb3dd93a7748d
-
SHA1
ade7d70f0f298d8c0317a01c8a333918394dbeef
-
SHA256
cd997fd9fe26feebd7b018520a56b501e2445a30bb3212cd0465a955d7130a5c
-
SHA512
33289af3b3eaf82587946540e7a1d59741c7b4978a24fff75f02ff4b3750a2f4373e423aeb6b9a45432dd64f0e894a0d239d47d0dd5a52a7078f01a7014da41c
-
SSDEEP
1536:iy3jEdAJgijFRHshIG8tezI0fKxeOaHsBPjWLYBYXHZwW6pOu2loHAJFBG:bzEziMhpA4K0O6YGJZu2iHAJq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1948 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1948 AcroRd32.exe 1948 AcroRd32.exe 1948 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e887d8ff084903de1e9fb3dd93a7748d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c0aaebfd6d638e045f050f50d573676b
SHA11c0962bbe63a9af802406652057aa90df3fe706a
SHA256c731fdc4212c3566e71d61ed449e9c9d1d1db6fdad15d17c30d8f2878d831b30
SHA512c20c5e375dd05d203e3e2ba85a08a86211fb6f9538a16defd28107d713306df7ac1832b32b00ca2b417fe8018e2b28a274081ab5655d3a0f5f058a36e972040a