Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
28/04/2024, 10:29
Behavioral task
behavioral1
Sample
04fc9c5727918b5547a592a7db3a30db_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
04fc9c5727918b5547a592a7db3a30db_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
04fc9c5727918b5547a592a7db3a30db_JaffaCakes118.pdf
-
Size
46KB
-
MD5
04fc9c5727918b5547a592a7db3a30db
-
SHA1
041dc50526e43a0c396cc7cb246461ffa10ea74f
-
SHA256
50a4705e72c862efe54f535224e1630941a87ace47d90c15fe24e963973a29b8
-
SHA512
09b8e3804db626ddc9106fa2ce531b58477551dbb3990a882b82276d59360b8f6295fbc18f59f1cc7a6976d84eef39fb33dbc0782fc2027f2dc95be40c331dc3
-
SSDEEP
768:XcgGzpDzgbP6lghH8bqAAUb/HBmzxxweqKTOEZZVqQrhU6OKqEeZoN7e7Xy1WfCu:pGFXgWKie3ZfTFFOBZLLysfCu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3012 AcroRd32.exe 3012 AcroRd32.exe 3012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04fc9c5727918b5547a592a7db3a30db_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3012
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD577b8dc527f40281c0e1f42b823ed2d01
SHA1b006095e38044b21ff17633716442b4ff805c224
SHA25633ece3abcd5dde4c3179756f719333f2763d1b52cd0988148e53881d45d7a73e
SHA512efd42632560718855359550a56345bff65f944f5ce2bdc28eb6a47314d3d4a42a4cb634f6efe7ecaee79a9f2d7048d6658d9ce81480a84f8dee836541ad65078