Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 14:16
Behavioral task
behavioral1
Sample
ea2ca7af25f56b492adfb4554ba0ac69_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea2ca7af25f56b492adfb4554ba0ac69_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
ea2ca7af25f56b492adfb4554ba0ac69_JaffaCakes118.pdf
-
Size
106KB
-
MD5
ea2ca7af25f56b492adfb4554ba0ac69
-
SHA1
87a005b3db1f2f55222f0f43779bd98633d10ad5
-
SHA256
e114bc5fee05c57d536b5b666fcaf845159cdc4473b392fb3b4499889c631faa
-
SHA512
20a88b28ccffe233a03fd32cc570e3526846eddeea4e23e8541ae6003a984165a72f6b1913961b492c8725945a14ba91fdb08b4810b025c088fdce8d790debdf
-
SSDEEP
3072:BqjwkMIfMvNo4BObOtUYvZ88DRQssOKq7O:Bq9MIf6NrOCtUIZWrqq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1900 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1900 AcroRd32.exe 1900 AcroRd32.exe 1900 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ea2ca7af25f56b492adfb4554ba0ac69_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1900
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57d7ba85f842624cbc861f86fad94674c
SHA1f1cec6a31d512f81479335bd0ed92b32e4a8ac83
SHA2565f08c9a64ceb4dacf4b1f4e553e23949d075f211ea65f29fe60aa9e86c32e340
SHA5129a453732c45c9d8d9a6647ebe1e21e0b7e8029301785ad343c5831905b925b5aa9a73d2f79730c41f852e535a1287313fb5cf44eaea37852ec09edec39ae380c