Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
15/04/2024, 20:53
General
-
Target
f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exe
-
Size
162KB
-
MD5
f1e736c54a95ee90f684c9c9a4f0f0b3
-
SHA1
fa2b2dfe8f242b9603c03cfea5eef52c66af6b1e
-
SHA256
b8aee91e10d9b13e1ef384a7cd58ac604eb104ec5d8f74110db6bc125726b967
-
SHA512
3f27273cb9d7410649f100c25f5138e571aed5e5cc1b3a60f27ce17b633ed25dad1e4d9685ffb0cd49d2e12eb1c3f2c2aa6a6c875f289e129b2bfc71634889ef
-
SSDEEP
3072:bOmGftMUYqK1+pJWEA/erG9aTT5z/wteJUXvNK+T/b8bITU02MJ2:6D6qKAWEdgSLwteevNKGD8UU0RJ2
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
162KB
MD58755b8549f52cdc47e3b71d24078aecb
SHA10c7228ffdf33724a9d46f6261d72ad7203f8b5ce
SHA256385893c79f64577104f8ee8c5c66074b8b772100e2f529ace5057b942f41b0bc
SHA512b5be6623edc1007214401c9e7bc2e84db971b2235c1bde37d0339cccabb829bc14f9651f8bbd3c941e34a7bbd8585be9812668efb7b2e0635bd92bed47e9cd34
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
56KB
-
Filesize
108KB