Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
09/05/2024, 03:27
Behavioral task
behavioral1
Sample
2816cf5a382947afd6e729ea8ab35c70_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2816cf5a382947afd6e729ea8ab35c70_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
2816cf5a382947afd6e729ea8ab35c70_JaffaCakes118.pdf
-
Size
185KB
-
MD5
2816cf5a382947afd6e729ea8ab35c70
-
SHA1
13469d3c1355b3d280aee3684b244e09541b67b1
-
SHA256
2639e23c92ece3797f2941810d147eeb71b87ed7beed513f1e7be85cf04d87f0
-
SHA512
1b437328843fdcc8f8b010b51c968b9b963abcf05f4baeec28ea99a45fd5a8674f3df710ba7199994c08b1cfafe51ffc75c9b9e5a58f5999857ea98dea61c625
-
SSDEEP
3072:E2irbxzGAFYDMxud7fKg3dXVmbOn5ug6KjnH9JKeacbmw5u2WSw:E2MKlWQ7Sg3d4bO5Chz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2816cf5a382947afd6e729ea8ab35c70_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57fa7df918f408d498f6041890c2500e5
SHA1b3e0b3544a1b91b8983ac6cd9edff510851ea195
SHA2567b8546be1f14c07d6dc664c888b0ae4e46af7e031d7ad2bce88c48ef21655688
SHA5126e0e18b0f238eccf949c62aa5fbc6422582525c3cfe1054d9485f2567c010f09003bcbb9acb160a6a1741eb25b4e56819937acfec38ce4119cc53de7c17115c2