Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
20/04/2024, 03:30
General
-
Target
fbd3bedec72f831efaed06f74b4e3ae2_JaffaCakes118.exe
-
Size
82KB
-
MD5
fbd3bedec72f831efaed06f74b4e3ae2
-
SHA1
49df170214d153964a9888c32201dfab3b7dfde9
-
SHA256
6668f849de03b9dfc5245fd0aa7875070c542df16ea6425e096919f8133e8580
-
SHA512
87b30a7216726d416b310a9012886f83f263b1d67e4665c7f56bf560dba207073f2197ec724bae6b1955b7bf9c2060fa764bea33ffaca2fce04c9a91939284b7
-
SSDEEP
1536:WDIsj2g2GDLI8dw7JsL7WHjVaQ/kZKnSvSRIArEkZ1BIE/Iz38sI/BIjCIlIeG7f:WDXR24I80i2H5avKn0+t5sYTIDKoMQDy
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fbd3bedec72f831efaed06f74b4e3ae2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fbd3bedec72f831efaed06f74b4e3ae2_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\fbd3bedec72f831efaed06f74b4e3ae2_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\fbd3bedec72f831efaed06f74b4e3ae2_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD558a1833f7f03782b3fe9c755ea41110c
SHA10433efec23246b149879424e5b7f61801aa49f5d
SHA2562bf50313524aa0eae0633a9abf0d855d1050f7cd76e7f19a2f97e383c95d8d4e
SHA5121e59c3fcd0c64c7c43559721729e981118cf82ceaf3788928434bcd0968e042002b272af639a86675856acca295a81a244b6c2c9635c34ce158891282765fe77
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB