Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
11/04/2024, 10:06
General
-
Target
ed2a91b6f4707fd75f4a13b60a366aff_JaffaCakes118.exe
-
Size
81KB
-
MD5
ed2a91b6f4707fd75f4a13b60a366aff
-
SHA1
2027f16ab8642529ce581e0f99a4f5c92fc0852b
-
SHA256
698e0159a5fbfa05dc5944135880739e6170460b2659ab1a905b2875ee4c1d0c
-
SHA512
9fb65646f9e9903ee888aeb2c7045fe01d60de5649264460fc2fe5d076bc710d5fec301e16de51f37000100d4a6d6bcc3bb1fa5ffc4c1d14b41c93a4b010fd2d
-
SSDEEP
1536:i8OspyIoJBYxM5Ty4G/YlAijVvN33i6UWhhzMHoyGx+rhE:iZ2y1JyMxRAANi6JhNy2+rh
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ed2a91b6f4707fd75f4a13b60a366aff_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ed2a91b6f4707fd75f4a13b60a366aff_JaffaCakes118.exe"1⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\svchost.exesvchost.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
204KB
-
Filesize
8KB
-
Filesize
80KB
-
Filesize
80KB