Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 03:10
Behavioral task
behavioral1
Sample
f029f0ca7d1c97bda8c213fd2c127815_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f029f0ca7d1c97bda8c213fd2c127815_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f029f0ca7d1c97bda8c213fd2c127815_JaffaCakes118.pdf
-
Size
85KB
-
MD5
f029f0ca7d1c97bda8c213fd2c127815
-
SHA1
9e4c883d0c732d9998194c4dc4f05f410a9eacdb
-
SHA256
106c4a6caab6abd8f617e9b411bb428ea4af11118881149a1f0e159f2cfa6f2b
-
SHA512
9745e5da2fc9ce46d1a4afe31e2f335fb7309f0a696ce51c6c3a9fa5ed5173c664e3044ef003c8bbee5fe5eb6743db8cd29ff53f436b565ff07bf5ed55c7357a
-
SSDEEP
1536:L3YEjaoim4qRt4Da9vlKEUJJq/LF1roxE5tj8EfPWHpOvTWqh7+Z3EgvHjg4VE:LYEGox46ZlvUJg/LL0xijdlv3h7+Z39e
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 952 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 952 AcroRd32.exe 952 AcroRd32.exe 952 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f029f0ca7d1c97bda8c213fd2c127815_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:952
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5129f918e1dac9338699103728e44a566
SHA1c35122b783ab661a32a87ae05807b8834976cd48
SHA256194dc40e2fdcd45e576cd3786b334aafdc9638d4dc1cc13763618d82adb7a078
SHA512703e72111e18615ce61663c393fb191b8bd9c62dec50ff3105afbf1bdad4f89e61c8bf8726e4135abdfd5c23f2e8b59680891f94c77af1791707317a3e587ed0