Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
05/05/2024, 02:57
Behavioral task
behavioral1
Sample
15ab98a5ae7ab27b720d55887afea915_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
15ab98a5ae7ab27b720d55887afea915_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
15ab98a5ae7ab27b720d55887afea915_JaffaCakes118.pdf
-
Size
45KB
-
MD5
15ab98a5ae7ab27b720d55887afea915
-
SHA1
c3600c31c295c2eaf265eb319acd49efac392b85
-
SHA256
7bc7bd07eb1ae04f14dd1ad7d6666c17624b84666b0e4017009ce023491f4b9f
-
SHA512
4509d49f2d0d49df7c1ca0e27630f802f4e689eddab8805118866360a235d6795c076262b9c6b0b7dce820f2d6aa99ae9a85d1cf215c749f755dcde93f0dce1e
-
SSDEEP
768:4gGzpDv075Wt8bxbSB5h7TUf3xaEG8xqrDugGmIgKLEu+iBWp1IzqsqYieC:VGFThM/xDdEmgGmdKgPiBQImRJB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3004 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3004 AcroRd32.exe 3004 AcroRd32.exe 3004 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\15ab98a5ae7ab27b720d55887afea915_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3004
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c6c472f0682aa63b106358211103f076
SHA1be4c1f4605b013dccce45f82817f72a0d443d525
SHA2561432facd4fc30ac7e5da21d24392e7c0e945a28dd13958f94f1273b05d7aa44e
SHA512646ee66801499ddb4a37722bfb56e02b7d9a5b48cb760d5f50372025f2cc3dbadd267d5254e43d29d6dd6899849a8953823cd630c53dad13b6c4ff69c1f88799