Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

f85017ba00...18.exe

windows7-x64

1

f85017ba00...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    116s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/04/2024, 15:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f85017ba006b896700628e0965e1b539_JaffaCakes118.exe

  • Size

    156KB

  • MD5

    f85017ba006b896700628e0965e1b539

  • SHA1

    61aa1f8122c3016108df8af6dec657ab77c2b934

  • SHA256

    57bfc864e12c5ed264e542664c10f4558a408a5365647739b55c4b304c56d360

  • SHA512

    5fa794c9adc5447b016fd836bea213f9b7e1461915e3da7a6fc7bb1f880bd73a1e8845937f2cb3de4f0f2c172d8cf55d4624532ad9392d66bf57df29dca4b982

  • SSDEEP

    3072:svkzjgtOjCyCXoFvN9p/X/5zLiWynCObBOMEDrPbcR61iFvA+HswsumJOo1c9ZxS:svkz/eyCYvN9p/X/5zLDyCSBOMEDrPbc

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f85017ba006b896700628e0965e1b539_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f85017ba006b896700628e0965e1b539_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Templates\bundle.ini
    Filesize

    801B

    MD5

    44fe0c9f0d51778edf5de6e2b13dffa0

    SHA1

    d82f22467abcbde7e79fed1d8fcfb9d6f55c3dab

    SHA256

    6c1faecf39a182e8f2b9cdf2e0f875c858deace47186fc686511ea29a2b91e49

    SHA512

    29932a84efd69dfc30e7d305d52333a3954f65b0783a7d535f5f5299184368a6b6bdbff47daa051c90aea7fbeee724689814e8ae6c20cba9a057e515cbd4a24f

    Download Submit