Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
84s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
16/04/2024, 14:44
General
-
Target
f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exe
-
Size
82KB
-
MD5
f3b4ed880ce2c7679bf593c7589c3af6
-
SHA1
ab8f5c512009fb894364ff47c2b8cb7acc4a6edc
-
SHA256
d17998d0d925cbaa6caad22b5a1be736d4a0809f56f6ca3ea4d41a6002ee3283
-
SHA512
6d89d1b1a22269f935495c1760df1a02eebca832e2704c11c773b1a16ef1770d8ac9103329885e1f6912a44bd84936e02605fa1e58df9865aae9c48ec00004bb
-
SSDEEP
1536:5WAyEbumSoTUG73BOifaUZYIjDQoFIkFgBCAP/vCT+YZ/TtWu9qdC9+aA:5bimDTUG73BOifvDQoSRBJHCZ/TYu9q3
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f3b4ed880ce2c7679bf593c7589c3af6_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5cf423a4c721e60228442c48d2a7dee25
SHA1359f69e5649144ecb0bc34eb896beca6441350c5
SHA2560b93f6838a095e051af9e53f9b6c0cac3ff77c9bbbbaf5ad6c02d922a9f1d9fe
SHA512a95e32cf77eab8b984289bc51160acc1d92def0d5d83e1bc70a44c4cf5e013775f497fef2c70ac00c3c7d26fdd62b8f6e99d8c02188c06f462f055c34f5a0152
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB