Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
04/05/2024, 14:43
Behavioral task
behavioral1
Sample
132c57ce7e482968332d0e3ca528cd2f_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
132c57ce7e482968332d0e3ca528cd2f_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
132c57ce7e482968332d0e3ca528cd2f_JaffaCakes118.pdf
-
Size
51KB
-
MD5
132c57ce7e482968332d0e3ca528cd2f
-
SHA1
2be4cdc935af76a58aa92dc29711f2f9f33e4dd4
-
SHA256
b8176315ec39577ae25429f179b29b9580bfa73d1e726e017af95e6202e130b2
-
SHA512
18824803a67cbccecc16c78fc0500c242198bf9f2a6e877359bc7a35953dc63859f0a7b25ad99d2a1e3f4e899b54f22dde8e9a880232c5b194c424f6e5f0add6
-
SSDEEP
1536:DXFZmGWS18pGeqN9U1hAYAzVA9uSkBR+MKEL7gQbAthob5Y:jys1bAlkBR17gAALoC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2360 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2360 AcroRd32.exe 2360 AcroRd32.exe 2360 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\132c57ce7e482968332d0e3ca528cd2f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2360
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bb7320b859238038e7f7db126b7f78f9
SHA1a739f5751cdd9036ecc0c9eebca6d87ed96a5198
SHA256e3d777799f51691d76684852ff030fd6aaf90fb73f2cafb7dddfca6a7af31904
SHA512fd7e40b6fbf7a82f731fe0845c848a437d610aab63f8c3428d0a6f93259232e4497829c077fc08d47bfa60e53fe19585c76a9ec153125dfbcc4e17d72cc20d5d