Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
04/05/2024, 14:59
Behavioral task
behavioral1
Sample
133b525da76d79dc01e2af5667cd7c08_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
133b525da76d79dc01e2af5667cd7c08_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
133b525da76d79dc01e2af5667cd7c08_JaffaCakes118.pdf
-
Size
45KB
-
MD5
133b525da76d79dc01e2af5667cd7c08
-
SHA1
a594d6d6a7884dd018dc993a2a45874381633f11
-
SHA256
d10ccd00fcf9fb507418d6b9266657b0c0e962a52ace0f060997c27a94c3f2de
-
SHA512
184d247f84c2e0ffeabc499d3aa4e6ee39ba6b00a56a0c197b263285dea5fd23f22907cc654198651125c3f74e11347657b4ee31502fa511007aaa7319117534
-
SSDEEP
768:EbZk29CGxVAd4BDmnM6XV7GDWXKcXMPYQQJ3t7sdhsddVHa8BykB7fd5p8bwRvgA:Ez9CG7urbyO0b0N23QUcbV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1632 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1632 AcroRd32.exe 1632 AcroRd32.exe 1632 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\133b525da76d79dc01e2af5667cd7c08_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1632
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD581ecaed3306df76f7354310c9de8c298
SHA1567a8cbb0a0e53924776cfdcf08615ab731fe4b7
SHA256016bb6a5deebbe1fccc898d055270ce66063a3c85117ed304f5a1941cfae6c37
SHA512e468c81699b8782d63f936e090f4cfa52900d218c13b14af355a96bbad17e26c902b83d3f632dcd8081eea24f2addad66903d0343b33b7d7379ef319443cd4cb