Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 17:56
Static task
static1
Behavioral task
behavioral1
Sample
ffd6cc98e5c1be1070c8b86c7f8f7dd2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffd6cc98e5c1be1070c8b86c7f8f7dd2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ffd6cc98e5c1be1070c8b86c7f8f7dd2_JaffaCakes118.exe
-
Size
38KB
-
MD5
ffd6cc98e5c1be1070c8b86c7f8f7dd2
-
SHA1
e3cae1823e73c11d095559dbdd9e7bd781cbd624
-
SHA256
f256bff52658c48c8b89932646db57613992a9063e310b0618d38434776abf87
-
SHA512
bd3cabe4afaba0b8f8c8fac01ce079b60795321cbfa786421f52a8096b48a83f494a70fda45f9292623826702bd939ea69a8a9c6dd6e53e990468a274e07218b
-
SSDEEP
768:kndrUPgJ2Abt88F2ojvvkhbnLztzBrl9zpGzjeiKtnIm/k47nWhsHPvDJ:ydrUocAbt5FvUD/Xrn9GzXKVImtyi3F
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2308 ffd6cc98e5c1be1070c8b86c7f8f7dd2_JaffaCakes118.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\MSINFO\atmQQ2.dll ffd6cc98e5c1be1070c8b86c7f8f7dd2_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2308 ffd6cc98e5c1be1070c8b86c7f8f7dd2_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
54KB
MD58ad926f5f0aa3e1fcd9e2bff54379181
SHA14edb233575d2705f3c36380714a46584244185cb
SHA256f0dc86d122921be37dee9cc0acf609963e3b25061fb71042243eb876d445659e
SHA5128402e77578dd720041292fae258d289b005197ebb7446b3bdc565ef7698cfb7ec3f65fa9540ef4d6bc085bd56cd9eefa01ce129b9c4640b922248c4cc962f252