Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 07:24

General

  • Target

    02b78e9f5cae8de2b6be9d209d211b45_JaffaCakes118.exe

  • Size

    613KB

  • MD5

    02b78e9f5cae8de2b6be9d209d211b45

  • SHA1

    f65640eec33730e6da5c3e9d258a7f6572844be7

  • SHA256

    be459e61788ff6717daf56269e870b3060b13809d54c3e81073b79d2830115e2

  • SHA512

    9df8c6d5f5d5002042a3614f559f4e538b77cca1d114d64a5d981fe89be1780abe58212c096626dc7b55ec259f0dcea7095007cffddac5d2452d844ded8c153a

  • SSDEEP

    12288:QMJfsGjs9xApoHtIMJGT4sOuxt9FC/mOLq0hjhvNhnWY8hCT:QMJfsMsPqoHtIL4vu5OvWY

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 37 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\02b78e9f5cae8de2b6be9d209d211b45_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\02b78e9f5cae8de2b6be9d209d211b45_JaffaCakes118.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2428

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\bootstrap_37010.html

    Filesize

    156B

    MD5

    1ea9e5b417811379e874ad4870d5c51a

    SHA1

    a4bd01f828454f3619a815dbe5423b181ec4051c

    SHA256

    f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a

    SHA512

    965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\css\main.css

    Filesize

    8KB

    MD5

    96a51dae2653660004978bdb96e05d0b

    SHA1

    997222d5fb9856a28b9c5eaabd7b21c367fd3e69

    SHA256

    76eac3244fb94fa11f2205ad5221e9b04fcc886bea9dbfacc29e47c3f0d5db34

    SHA512

    b45234c764c23135918261de27ed7f985b7fc1e68b67baee3c6440af77934b5a774ae5830b34f70d11e6035d9cdb7a5d813770725893aacc408655c15b78afab

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\css\sdk-ui\progress-bar.css

    Filesize

    506B

    MD5

    5335f1c12201b5f7cf5f8b4f5692e3d1

    SHA1

    13807a10369f7ff9ab3f9aba18135bccb98bec2d

    SHA256

    974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda

    SHA512

    0d4e54d2ffe96ccf548097f7812e3608537b4dae9687816983fddfb73223c196159cc6a39fcdc000784c79b2ced878efbc7a5b5f6e057973bf25b128124510df

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\BGM.png

    Filesize

    7KB

    MD5

    e1de21431cd80247c373268dcdc46810

    SHA1

    c58bfb1f24cfbd76e163f1f2fa34a4c3e256b8c3

    SHA256

    1832b0fc5f9639b0edc14805709567445a2bc664e32f9244fa2273aab582f249

    SHA512

    5e6f1ff41dbb48de64f6d6a826565d0f4b2871da4402c04f9d7ce0093f546431d11c69d02746225e1634f66c2f8314ca0834586325eec5ea0c398706e8407dc4

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Close.png

    Filesize

    293B

    MD5

    75a9464e6e2e2d8efc82e5285ab0d95d

    SHA1

    03aa7ccf18666265cef894adc30aede977116405

    SHA256

    7ec62b84d0c741b8e1f4c735ba37fd4dc889690590cf900073793b8d6e44cd0a

    SHA512

    c52d190454e7d6fbafdd18960b5c95cc76da66ce02b7d0caf1eecc3335ae60b8aeb8b014be9adfaf46cafcdb7342029ec265d64576483cfc2b2439a514d9b63c

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Close_Hover.png

    Filesize

    294B

    MD5

    aa5fc77754056e5cf059ae73ae3ffb93

    SHA1

    d6dea0e225dc926506c9c1bc8d9084cbaf7cc350

    SHA256

    cb4b816b428001c2756dc75791598a256ff2774c5dc9e87253ae77b5aaed8da0

    SHA512

    1c61531ed01bd48af185450f64f6a908784a4846085044109cf18f385592f783ae6c9b99cffe95b4d6fc1108fc2cebdfeccca30a01c682f5d47b019429b0e8a6

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Color_Button.png

    Filesize

    186B

    MD5

    cb34059dda6977ef29f5fd45d44e43d1

    SHA1

    2675cea1f1938557d6f87470df709e6bff8b6496

    SHA256

    0a5a66db93e50634340263d4e2ddf5c249e8a8a02ed42a7e46b007a1de7025c5

    SHA512

    4771705b157a5488b4666f68f243f0c46deb9010ca8b3cb62ae3964a00dbe7fa43351d15bed2ffe7c0a145649d8c4825a3bc7ba608c3fdcd66e5f4d5678caef3

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Color_Button_Hover.png

    Filesize

    185B

    MD5

    0e48d56ec5ebca6a4d674aeb59971788

    SHA1

    11af42ce73872065d43c1ed58cc886a02884ff80

    SHA256

    2cfba98c0e6cb9edb17b527f57b2a961691a071d7b092e0c9ebe568f57568407

    SHA512

    b219cf9df63e0eda2a8d00e43e0e4a3f7588bdeee428fc3dcbdc6aab97d45361e1e762864fa0be156d3c5899067c5c0b9e64db1e08b0561e8a3e236bff8d7e58

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Grey_Button.png

    Filesize

    998B

    MD5

    0539e7fb067487c29b250c9937b7876c

    SHA1

    931fd5332ecc5ba30e05d4a92515f9b0ea351d73

    SHA256

    1da30b629ef14d7f7fac02151bdf5d96797729eae10cd76a8b905bb25b68786c

    SHA512

    8657616d83b4d4d3c3ebc9fd986f4eb857bdc94c988f587c94ca9409d84e933d767a70e0fe51606a564cfcb47ede8ca6e03de3e02f8bd61423065abf3672e3a9

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Grey_Button_Hover.png

    Filesize

    998B

    MD5

    eaa34bd4eede0458e4d33ebd8cb73267

    SHA1

    5b197c5dd387d40d7ac62cee44b1183b75047721

    SHA256

    ca9e9cf1e5ff794462c33113e92901001da3d0e790aab779398f7f58f8636b06

    SHA512

    e3ffddb8976241a6e08a9d640c4448ce289483414258c4a99c64c413e0201b75019415ec70045304ec78259dd7c958d10c30c7aadfca33a8bc84c2c40fa91080

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Icon_Generic.png

    Filesize

    1KB

    MD5

    a35aeb077ffa7ffb4382c639743d29cc

    SHA1

    a00692b5a73c035da31aa5a285202cd117118290

    SHA256

    dccfb478e6097086d886b5a01d120bf511b381982b0975e0c65eab3846e4234d

    SHA512

    1bd9612dc93217f1341764d1a4f917da8af338649772a41ae89798b5db7cc9bd9c6ec78b7a34945d3d0885b929bf7ae696a865dd50e4fb332ff3ca77bd84d629

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Loader.gif

    Filesize

    10KB

    MD5

    57ca1a2085d82f0574e3ef740b9a5ead

    SHA1

    2974f4bf37231205a256f2648189a461e74869c0

    SHA256

    476a7b1085cc64de1c0eb74a6776fa8385d57eb18774f199df83fc4d7bbcc24e

    SHA512

    2d50b9095d06ffd15eeeccf0eb438026ca8d09ba57141fed87a60edd2384e2139320fb5539144a2f16de885c49b0919a93690974f32b73654debca01d9d7d55c

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Pause_Button.png

    Filesize

    577B

    MD5

    84b37cb510f50c8fea812eb308d3f03f

    SHA1

    d141a79feb407506709f051e55c55438a12fd3b4

    SHA256

    7bf800336671204de36b7d1f6ceffdff830040f51d21bc44f220f68d72cf492b

    SHA512

    3222cb5772a4e9b20de253914c0856c7e6383567df68fcf287801f6f79248f65957515e7ec4a44db1fbe910afeae8ca3349295c4bdf03df6aabde36f2aaa6b5e

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Progress.png

    Filesize

    104B

    MD5

    35a600a752d3074501de31a516860499

    SHA1

    51eac62cf77a0b88a3e9cb9ee6f85def21fd4bcf

    SHA256

    14e064857751b23da7bbe40861ef4caf99b2496227507b8e3108fbac6d901f75

    SHA512

    046ec179571d239bfb2d51be9837f96d9afebf2e5db77bba0f4a25ce8716d37581a3f9753bd2dbb04c47711699a9d93987bceb71df0b8becf8c577d660320069

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\ProgressBar.png

    Filesize

    812B

    MD5

    eabb61abba55f80af418fa1128d1548d

    SHA1

    a5ee1d55de2cc60966039120c830fc19cefb0351

    SHA256

    717f3f02f5d5fd1478b6d2ec44acef6e70bb8f1adcf2dc030c08b92e851737e1

    SHA512

    d232072c9540bf0e2fd56f353c2cc83518eabf8282cc02d9f8bec81c0341287ada29ba79f2a515d68722658686b6cce97be138a48f44409562d9a567af200bd6

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Quick_Specs.png

    Filesize

    221B

    MD5

    07cd59b954e8495ad6cd6a7c11d2de86

    SHA1

    787aeda3eee8053705fb208a6b399b8340820b82

    SHA256

    6e6b964fd79b4a3461f128e2ed145b9b641d108b8616695f36387661cae995bb

    SHA512

    0159aca0c2a49393fd91acd4b6819217e67f8fd01e220297eb3e0fdd8132fad794fc317f5cc5e2b761d4123da71478b97df776908de6740eb6d54187c6c00754

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Quick_Specs_m.png

    Filesize

    1KB

    MD5

    8a55345dc271bf3f19debfa4628798d6

    SHA1

    71c7f3f9e2e8b7ac7c7f4608ccb20e8254defc60

    SHA256

    e22114029401a452b374cb6d8ec88fd884d6757c5ed452143cdec60606baf94a

    SHA512

    1c4d674e532442e5f0c8069d0072b604e171d5c627a8a9f2a9165b7543a4f697ebf281f0141322dc0d86388f7eb371aa88a93464866ee6dcd42d505b2ddc0206

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Quick_Specs_s.png

    Filesize

    1KB

    MD5

    64518567658979847dcaa9651d068e39

    SHA1

    024f1f450cad6e3cc6e1445956ae7fd7c594e5aa

    SHA256

    acdfdc4e5817d2572ce31f5b7368ea5feb9d102d5851bf2f6cb67ceb719dcf1c

    SHA512

    028b0ed7d71bc2fb0544f3b77bc39138850b361522a3c86aebd6b0a7dfca13b299f65ac85d7d2246481fe33bbc33f8a962f8d9a20f7cdbf2913dad74d2bd7f0d

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\Resume_Button.png

    Filesize

    718B

    MD5

    9d31583bcfad58a6b9ddeaf44549a5e6

    SHA1

    98f4c693af708e02201de2aee31fe094dc3b0a9c

    SHA256

    e466a2db2f755d9eb68619439af37ff4e45559b7a3f476e226ab2a11aeadae1a

    SHA512

    9ddaaad53375f4d2874fe5c98b6782202d2bd975cdd9363796986dc7567368b94d9ec1aa3e839194097838b787bbd71d574540cf5b04fd04f10fa80d6a89e695

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\default_tb.png

    Filesize

    19KB

    MD5

    70e70599d4b853df0f12f6cb0e04695f

    SHA1

    6e3a721aef65625bf99b639800476150d262dd4b

    SHA256

    87af4027e8f89459463bdd73df7b928b883eefb20514159d3a1a4be0d39e00c0

    SHA512

    1efcf8af09cf857b3850cec43a88fc8c0992e3b04f78ad2c71b84c2ac7775e745df211582694588b29217aefb1ae02b29b94c2cfe52b5d32bdafb9dce73b9920

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\images\sponsored.png

    Filesize

    2KB

    MD5

    e3758d529f93fee4807f5ea95fbc1a6c

    SHA1

    3a9a1ba234e613e5f808c3ffeda05a10a5dafe00

    SHA256

    8d46eb0c60043dcb7d79ab3d0525148fc901764620c02e4b9c5dd8b0e9026303

    SHA512

    e891552bee3aa10247cad1fcc510331077016a6e71d46827be2dd46017f943c5acc2c1506b41217880d35d52a94989923ad0a345f8791da4bb379eceefe3c407

  • C:\Users\Admin\AppData\Local\Temp\ish259397323\locale\EN.locale

    Filesize

    4KB

    MD5

    21e95b2d1315d8c3b4e18c18ed3fbd61

    SHA1

    131c68829ed4f8c9dcd2218c9e4cedca64063b01

    SHA256

    53c90300d1bea77f14fe2ac369275ac5c76d2f4cfd934187c88bae8db5f8bb95

    SHA512

    2ca325604d5f552afb4e7fbcf297f62bb7241e752734c51f4521ff186003a874d8e710eff7aa42c71f3af370fa1612efd7d43a8f03663f17eded445cd916142c

  • memory/2428-189-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-178-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-108-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-110-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-107-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-156-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-157-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-1-0x0000000000400000-0x0000000000419000-memory.dmp

    Filesize

    100KB

  • memory/2428-159-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-7-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2428-4-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-6-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-177-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-179-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-188-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-5-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-180-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-0-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-109-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-187-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-197-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-190-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-192-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-193-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2428-195-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-111-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-199-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-201-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-204-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-205-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-206-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-210-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-213-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-214-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-217-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-219-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-222-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-223-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-225-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB

  • memory/2428-226-0x0000000000420000-0x0000000000554000-memory.dmp

    Filesize

    1.2MB