Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

f91d3048cb...18.pdf

windows7-x64

1

f91d3048cb...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 00:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f91d3048cbcad4be64fc0d7c63b066d6_JaffaCakes118.pdf

  • Size

    98KB

  • MD5

    f91d3048cbcad4be64fc0d7c63b066d6

  • SHA1

    0e335a52c9c3da807e6358f9d7f8aa4848d7e57f

  • SHA256

    74b23cc73b1c45f37c7e9898e8677361d5ea0a32f21c61c9697b2209508ce161

  • SHA512

    f57ced556e4e15ef2a336191bd2de8636be9c2443703e104e863f04d4328231c2f15d11e914065c5b6f67c9799c7929d642d2bf51bdd19e7b9f01660ae4373df

  • SSDEEP

    3072:DFhURh857K3nux6gf3Y2fmkQGRIzIPOjH9ZiyCT:DL6h80366w3JfjQGqxH9o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f91d3048cbcad4be64fc0d7c63b066d6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2455a7fe3251d0bd43109fdb1a265b54

    SHA1

    222cf5f0d1a739ac3e36f8bb9a7f48e36967cbc4

    SHA256

    144e1fd7833b516e1eaaa4ec418ad63e57b9d92a96ca7269384f2cd0fefa4956

    SHA512

    c4b007d0dc9522a7f849521c39a7d3c4841165c1131f427a02623e5cf2f45483fdba9f32f230c029cd3230d927df6ab7d2b52bea829d65ace18bb44682e568a9

    Download Submit