Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08/04/2024, 20:31
General
-
Target
e8598d4a260b9a096dba45991f1b8f7e_JaffaCakes118.exe
-
Size
16KB
-
MD5
e8598d4a260b9a096dba45991f1b8f7e
-
SHA1
8fb70fdcb032a29046f4916206cc6091317c372e
-
SHA256
00563c6251c7b76563613fa38ea74faaea8baf25e155f2a0b45e3f6a777cfbeb
-
SHA512
70f04a3bae94ad0a0431fec4b125110c3607ae54ca6413f16a0ad1e1e9f8a4c667a2a3c08b7e575ece2181db67cbb6c5baea8da996e2a3cce2c29cf526da4448
-
SSDEEP
384:Rbb3jVuE71pYcYeI0jdnm2nH0sOV5JItO8x4pHb8:Zn4M1ycYa5HNtqq
Score
7/10
Malware Config
Signatures
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e8598d4a260b9a096dba45991f1b8f7e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e8598d4a260b9a096dba45991f1b8f7e_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB