Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
123s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
-
submitted
16/04/2024, 07:08 UTC
General
-
Target
f2f554131f472fc957379b9105cb0492_JaffaCakes118.exe
-
Size
24KB
-
MD5
f2f554131f472fc957379b9105cb0492
-
SHA1
72a44479b4468b4a4e40ab673241a6645e3e83f8
-
SHA256
8f451130b5aad773271dbb1a42c05f93461c65f39aad448b945d02156ff3830b
-
SHA512
0a3c390f70ce78cb3bb02e5d2b0ab67bd86adee69c9643b53bbe8cb11ac26b57573f3c4b8f6cc8933bfb2241039088b95a61d4f04c93b24033d6aab22d5e7f51
-
SSDEEP
192:rJ6gkMF0LMCv2azk5hJHM0+nXVZpMJY0syoiD9sZrv:r0sF0LMCeaFl7MJY0RFD9sVv
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2f554131f472fc957379b9105cb0492_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f2f554131f472fc957379b9105cb0492_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
-
DNSskype.tom.comRemote address:8.8.8.8:53Requestskype.tom.comIN AResponse
No results found
-
8.8.8.8:53skype.tom.comdns
DNS Request
skype.tom.com