Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20/04/2024, 16:45
General
-
Target
fd2e1eb2b395b7138148ef41e42c8a10_JaffaCakes118.exe
-
Size
94KB
-
MD5
fd2e1eb2b395b7138148ef41e42c8a10
-
SHA1
ef04fbd48a37b87fdef98274aaee79099b1eb622
-
SHA256
9fe5255ae5e22c6ad7d7bcd85d817518cd81189d26431f4538c7f5f0df8cf759
-
SHA512
a6890696ec72d44f17d9bdb57c976f906c85ad8eb8daff11fd6cb854cd38d5023191b65ab0faa8c1b454c1c8b519055e995c276eb25b1e7281ff6a5b18704c9e
-
SSDEEP
1536:UfuoE+6FWv70Syt2Y320fFYxkSIzX6vD0c3S08AGUfTZqnPl:Qp667qVZ2tJ3SBXUfyP
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd2e1eb2b395b7138148ef41e42c8a10_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fd2e1eb2b395b7138148ef41e42c8a10_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
MD527d3d48fe6dc6bcd8ebaefbd192d8352
SHA1adfa32f7b0355174d4a846d293f6c488cb70db93
SHA25606d718610b404b0cbc140a7260ddb37319da566f18f3bef29e546d876e24d1d0
SHA512db7c5a468194213b6acfa56cda8d202c18f17a11d4031b213596f15a1096cabd115ad3c707f3a0b84f7219665b96b6a9e4b580cf7e7740ece36176a173188ba7
-
Filesize
188KB
-
Filesize
76KB
-
Filesize
188KB