Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

f30ce945c3...18.pdf

windows7-x64

1

f30ce945c3...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 08:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f30ce945c3d1fe234647b69a8e698b79_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    f30ce945c3d1fe234647b69a8e698b79

  • SHA1

    801518f217938e822f57f25480f8b98572f5eeab

  • SHA256

    43b61a08beb53609342073e414906ccc8904ce473b606d59a52a98db70711aeb

  • SHA512

    daf8c8724dfffb4a2ab8b0969a29928bf52e4901c1fb9ea298811c67a76f536ebc255dfe1ec5156b98c8ba1ec301f546618f5b531060dcfc4147670746cf883d

  • SSDEEP

    1536:CRnG7DidHFo5UrJdNFiWkNpOPaWbUpJJcU8cuJr7:0GPJUr7NFHPNUZcU819

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f30ce945c3d1fe234647b69a8e698b79_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1e0ea4340634a5b924684fc4ce2610f0

    SHA1

    6f528e03313bff3e6957f9df74c93a0b52152938

    SHA256

    e890729d5557c9ed7435f8986ba91eb7ab48d7635a359aca4649a059e1cf81ad

    SHA512

    328c3644ea3681ddb29d9be292b5bc371cc1964f9f0aa70e90c1e65eb046b7d658b115942c1f1ace01a7153b8964b55b8eda4ccb82250ba1f8c6cd315eba69f8

    Download Submit