Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/04/2024, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
ecaa93a0996a492dc19f35a169141654_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecaa93a0996a492dc19f35a169141654_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecaa93a0996a492dc19f35a169141654_JaffaCakes118.exe
-
Size
652KB
-
MD5
ecaa93a0996a492dc19f35a169141654
-
SHA1
e7c357c1c16ebc923d7f71e132d1c9e379f6a0e9
-
SHA256
5bcce724f7c3160c5f110bc0dd461ab967044716e53bf5e84cda568d42d0c78f
-
SHA512
31fa94a25deafa7dfec2d22e8c1b30002d5d3c810b6a6f5c23271717c4ef1156c7cb10e58767a5ca270393be1bcbbc7897d32ced255225bfef142662967e9b15
-
SSDEEP
12288:nxfDgKX67CwIz1IZOYo4p7JYgcoI20DpBz4aKo/zUfpfsHfLdoopsM:nxMKsCwIz1IZOYo4RJYgcoxWSaKo/EsF
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4000 ecaa93a0996a492dc19f35a169141654_JaffaCakes118.exe 4000 ecaa93a0996a492dc19f35a169141654_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4000 ecaa93a0996a492dc19f35a169141654_JaffaCakes118.exe 4000 ecaa93a0996a492dc19f35a169141654_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
583B
MD59a38f4f95668d5238cbbc0b1bfc2c7f9
SHA16b46494436a0c17fec06d829145ed350e8fa5c34
SHA2560647e85dd8cdb8430c25acf2851660ef9612c3db5a372fa6492b8f6a427621a8
SHA512089420df4c511397fff02efb2c08f70a28a9038ebc7b950273b84250b2695431e08d54d4706b6f94a3f2cd5cf833995eb6b24631b52636c564e1b855865de479