Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
02/05/2024, 15:39
Behavioral task
behavioral1
Sample
0ee7b40d15aabcd7fc9ecd48472405ce_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ee7b40d15aabcd7fc9ecd48472405ce_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
0ee7b40d15aabcd7fc9ecd48472405ce_JaffaCakes118.pdf
-
Size
43KB
-
MD5
0ee7b40d15aabcd7fc9ecd48472405ce
-
SHA1
d8fbdd47c0cf7a266e77c49a284db82e0f6b33ca
-
SHA256
dbd74f356073f7b5082f3c2cf767823259753c97bb96aa1d10ba9c07dc4fb7b2
-
SHA512
72ab8a2b5b64fe013962aae84bfbee814edc383aaaca6157820680d304af1617f2fac9b5b3145f040fa0ea5f5a03ab43aa9c98269950ae2ffc98023ae1cbd6b8
-
SSDEEP
768:mJiQGzPXour39XTVfi5tb2AjJvJlhQAp4e1opUEpQjSUMn77N2cmt0g:4JGzPXR3dVfqdXjgApnEGjSRN2cmt0g
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2756 AcroRd32.exe 2756 AcroRd32.exe 2756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ee7b40d15aabcd7fc9ecd48472405ce_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59ee872cc2cbc06de8ab4499b107c1a32
SHA1672312815feb51f30ea7899077fe3747892d442e
SHA256a63ac0ea7e4a6da969265fd1a7feda706fe4fadebc7a3ae4431196c4488b966c
SHA5120fbb392e9cf55ae80848f9a92e6a2919698e1ecf18584265fba476a3dcf7b795f46555d6edb4f12f52dc65e25d1a623c1633c3d25fa6c0a19a90cb79224e28b5