Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 18:50
Behavioral task
behavioral1
Sample
fd66b4b9c28e354a4c969abfe49d439c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd66b4b9c28e354a4c969abfe49d439c_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fd66b4b9c28e354a4c969abfe49d439c_JaffaCakes118.pdf
-
Size
85KB
-
MD5
fd66b4b9c28e354a4c969abfe49d439c
-
SHA1
c4ef923932f5ec231816d58225c9a15f7ac50117
-
SHA256
478552de3ede860f5d9f0275fe2dd013f05037ff8e748b4202103b2daa7e778b
-
SHA512
a3a9b0254e43e2211df58d5d91026eb778a19deb4825386d03537fb4d23aadf3cd23d7a475d45b2008a2b7a16e0ab53c07a129a186e778dedbf3829fc1917759
-
SSDEEP
1536:vQVo7uj01UWircAPE1pvGHKwnKV0YvNW6HBRs4/EN9U9xFWspORFOrn:orW7Ac1pvGqweXvxh/EN9U9xMRs
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 360 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 360 AcroRd32.exe 360 AcroRd32.exe 360 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fd66b4b9c28e354a4c969abfe49d439c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:360
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55efaab759363914fa9864b8efe384578
SHA18f7e9b44d1eff737a3e772b1b1cc55d3b824644e
SHA2564adc186a40397e4c32658913c26abe4da5758c7a6075e2adc32822d632eddd63
SHA512610676e8290208e05c6a3a8c616236a32d88cd3e401297b23a121f204b0a0598371a03bda9edf4779325a5a17d6136252905c3c0de610d24b2dc79fbaa005b1d