Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

e9482b783e...18.pdf

windows7-x64

1

e9482b783e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 05:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e9482b783eba752059bdcb2142298d66_JaffaCakes118.pdf

  • Size

    112KB

  • MD5

    e9482b783eba752059bdcb2142298d66

  • SHA1

    f615ff508e1d9dfcc112a1fb43bead6c4fc26cd8

  • SHA256

    0a9e6dd0eab308fc1de156f7a044b646e312d6c2c28c897be677fe672e6598d2

  • SHA512

    7b52a2969a52af1300701a31d443c3a3cd8647153d0bf6c53f1f3de34aa8a00668fbc2d444a8be57e69e3f11fb110783f0ce9f712498c0be3d2f369ebbfc79a6

  • SSDEEP

    3072:CUeW4bB+i7qPB9Nm2tb+vsXcCBRAa70DZVla70:CUeWk+DPBnddcGAaob

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e9482b783eba752059bdcb2142298d66_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    cffbbb4526c8e434950d871d4e2f8d46

    SHA1

    07bd2a81884c446938af40b1b9e9d34d54a3a218

    SHA256

    52c9c01da7d0ee4e5cc440625a49ae1331df8147b1ac071a3bb37428505602df

    SHA512

    cc4633116b5c7a3a2d008ce182a51065bdf0631ac1a0e11ddacaa209a9b071811f948cb95fd2cb07006d5dabd2517b67e3c1c37d921bee5975d94c73c1e8f26c

    Download Submit