Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 00:03
Static task
static1
Behavioral task
behavioral1
Sample
ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe
-
Size
22KB
-
MD5
ec45673b4568f927134678187fc83b0c
-
SHA1
851052080624c41f5b18145f711a7885ee53f838
-
SHA256
03fdc2107556751b3cf44c2f8f29a123f075d46340313cf075ec53f3d8bc1fb1
-
SHA512
3c0fb1b33f5dfb5a106e6839300100560a61b9793b45376a6e137ebb8ac8e6d340ecb2e27e433847edf100a1b2a4517a550efe3be64363aa604070812d949c68
-
SSDEEP
384:MAwW9E7VnZc0wj610iCMOWOn/Ze7O9WlJsEwygJUjJmSF1QCElzPO+cBcU/:8Wi5nZGMcDfn/YbLQAE8+c
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x000c0000000121ea-4.dat acprotect -
Loads dropped DLL 1 IoCs
pid Process 1736 ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe -
resource yara_rule behavioral1/files/0x000c0000000121ea-4.dat upx behavioral1/memory/1736-6-0x00000000003C0000-0x00000000003D2000-memory.dmp upx behavioral1/memory/1736-7-0x00000000003C0000-0x00000000003D2000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\ec45673b4568f927134678187fc83b0c_JaffaCakes118hj.dll ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\ec45673b4568f927134678187fc83b0c_JaffaCakes118hj.dll ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1736 ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19KB
MD505a551774d34b16c2562b9bb1a3f3064
SHA1acb1cb1130183e3bdab28ad2717228881ca93924
SHA25635ecb04de6d61917f1c2c4e333f47ca23e2c5b7bb22ba525d230ebc7d136d869
SHA512f9599fed5e176f44ccfdb7a7556cfe0787a9caaf4d691fe8b1a5a582a1de4a4313ec59c4c0bb0da4ab7cf27c783a8906eb75a6476fb87d5bd812b5456ca054ad