Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 11:36
Behavioral task
behavioral1
Sample
ff308cf65bf053a653c4ae6d7526b3f1_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ff308cf65bf053a653c4ae6d7526b3f1_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ff308cf65bf053a653c4ae6d7526b3f1_JaffaCakes118.pdf
-
Size
40KB
-
MD5
ff308cf65bf053a653c4ae6d7526b3f1
-
SHA1
b9f950c24d1a0c688b6fbc2a4e9d2bd39f975496
-
SHA256
20ff535e1ce91b5c2131aaf4631cc2947253ea079cbbb22aa162fd3f39c98f47
-
SHA512
cd7ea043239cff1f7ad19f7ed4aedd5ce57affd9c616ae391d38a979c0d75c7f16e88072b7a86eedf51de2177ea18d4de2eb6b52312fce44b1089f438cf2ec7b
-
SSDEEP
768:jHuxEhihMHuPa0bdwCjOKB61bKsWKAgA2/YWhz83zhbsW:TKEhimOPlb1UVWKXAXW9831bsW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2040 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2040 AcroRd32.exe 2040 AcroRd32.exe 2040 AcroRd32.exe 2040 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff308cf65bf053a653c4ae6d7526b3f1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2040
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e60f327766a8acdca79ae1630e04ad44
SHA17d0550d77c293bb9116c6c98a884fd79dcc6b24f
SHA256abf44831b7199dddc52c8f561ac4f6f003a98b1f330fa701f959d1b2aec3ff2b
SHA512084d652f4096425d7ec4dc42c94bedbed7c47f2f592956dc72e4e0ba0f52439e3d691c62bdd9b4b5b1a2ae49f8fae828ba4966775e3b2c1b9a22fc021aed80d1