Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 10:26
Behavioral task
behavioral1
Sample
ff118b65441b37b89c6c4a83e49bef36_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff118b65441b37b89c6c4a83e49bef36_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ff118b65441b37b89c6c4a83e49bef36_JaffaCakes118.pdf
-
Size
83KB
-
MD5
ff118b65441b37b89c6c4a83e49bef36
-
SHA1
aa6f82d859695384dd3540fba4a8b029d3a496fb
-
SHA256
c025784911fd754dfe87626110a94f51cfc26cb6224af2960a2a57ca55a529c8
-
SHA512
14f78c7bd543a9abab61f10e0e18ae3a31868d454763147174568a770ed57d1be41ba179ff160117189d05da214ed18bf98e4ad1c731d55f46f96a70d262b2ee
-
SSDEEP
1536:3Zv20Dh/0r444TmYiMeaf5KzMO6jPu6cWcrXd7ofWUpO7/So:Z20Dt44SARKzMDjjE7oy7B
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2020 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2020 AcroRd32.exe 2020 AcroRd32.exe 2020 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff118b65441b37b89c6c4a83e49bef36_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5006cb9189ee79b5c9c1652dfc3e09632
SHA15105545e8a70a38cf09c52b5c2fc0b1d6fced70b
SHA256f7d532e2f39cebe028cc784ed6166a3c1a8aebadafcf21d9b30dc6c2ebcc7b58
SHA5120d731a8d21bef10bad7863d2b42097e2af3b3044fd1d0bee23d4e264c3e062d0a0ed79ec54b3320144d3119a7f2d222be1b946ac47cf26c9b9c7f20bbd490e29