Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08/04/2024, 22:42
General
-
Target
e89802b6da5ecbdd062b35f54184d7de_JaffaCakes118.exe
-
Size
93KB
-
MD5
e89802b6da5ecbdd062b35f54184d7de
-
SHA1
02ec74ffc6ac0907fed92e618c8016cb1b57ee96
-
SHA256
77faf37e8bb4c1f77c17adaf7d8ecacbcf8937f3ac821ae4ae4de2688b0fc020
-
SHA512
f6ae0049c8c98c0acf87423e41a7aaf127b11ef01e75ede808dcd3076d8fd3828461e946689729802f1f050d90bc6125129df7254a7f1495dc8fa85661664732
-
SSDEEP
1536:8VMUYluJ55FtamOK7ahnzLIGUfzMOd7+WTVNXGjF81YYCUqH7xXpSFrQq/:8VMUYluJpoI7aBIGUrMOJ+W5VGhKCjNg
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\e89802b6da5ecbdd062b35f54184d7de_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e89802b6da5ecbdd062b35f54184d7de_JaffaCakes118.exe"2⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
200KB
-
Filesize
64KB
-
Filesize
104KB
-
Filesize
96KB
-
Filesize
96KB
-
Filesize
104KB