Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16/04/2024, 16:24
General
-
Target
f3dbf326eb2f17f2266ffbb3a30ef781_JaffaCakes118.exe
-
Size
92KB
-
MD5
f3dbf326eb2f17f2266ffbb3a30ef781
-
SHA1
c75da8024c0b4eb20c3ae27f0b0b72a65a18cead
-
SHA256
59208d94aa7b9a85cf646d3d77689484d4a505072cb55f8493b2ec060f4d451c
-
SHA512
a666c962b28790f1cea7ba664c68eabf6b172262c961b0ecc2582f9088735f533618ce9045cb592048f233fcb7365a1f9f0a693c672fe3c409d2c3c0f7af14b5
-
SSDEEP
1536:bLyweT/wa0fEpvTXDVDYXzNFoW7tuqeL3hpPLe0P+hzK0CmuJd4BXKikc6C:/yweT6fEZ9YiWZLspzeEBbd4M5C
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3dbf326eb2f17f2266ffbb3a30ef781_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f3dbf326eb2f17f2266ffbb3a30ef781_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f3dbf326eb2f17f2266ffbb3a30ef781_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f3dbf326eb2f17f2266ffbb3a30ef781_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB
MD56d8f2d3757550b5b82eb783b37a95bdb
SHA1f28562ad481e688f06a38d5b61e3cd00923d2865
SHA256ef21c818a0a0f0f1e27a09e98aea229f18eea3de450781d0795a0cddd9d1c83c
SHA5128a74e9a202a9e2b56bb41ea6d6ed175c4383b929ec9960bb65757665fab8a4f6c59defc5c2a93c0078b594e03b6a59c2459332fcd26064245abdd812c137ace1
-
Filesize
232KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
232KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
232KB