Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 18:46
Behavioral task
behavioral1
Sample
4787a04b6c34ea44a2165eea40c80b9f_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4787a04b6c34ea44a2165eea40c80b9f_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
4787a04b6c34ea44a2165eea40c80b9f_JaffaCakes118.pdf
-
Size
54KB
-
MD5
4787a04b6c34ea44a2165eea40c80b9f
-
SHA1
2d7b602c9805c3837c901831dd05bf07a678f43d
-
SHA256
73181c8b7de775fbe34aa2b59dbc905330dedc795f3cace81505f8647523987b
-
SHA512
df47ded4f18c84b066af2aa3d3d8fea9205bafcf34e7831796eb0d4f743427e1f1bbcc64cf0aaccb54b356e1bf096a4c445d6576e99268f41dfbcfbbeb255839
-
SSDEEP
1536:5XFZmGWSN/HpBCk+imQzuOQWU8COltC6XGwJYkRCX6YC79uZ:pysxHp6/8hfGk0XTT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2440 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2440 AcroRd32.exe 2440 AcroRd32.exe 2440 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4787a04b6c34ea44a2165eea40c80b9f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2440
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5739cedde510c61e354b670ed2f0be6eb
SHA17678d80203d3684cc2d77eeea139da1b7da115e9
SHA25617e449b165b98bdff6259316e699fba7de37912ee2ce2a96a1d89541c6ce79b0
SHA512ea5aaf91b41c52cd9316e3098ccacc0e34a3fd69f0055393c42af7ca05589d02a80b63ab60c3b3cb2fe294f6c840ee6ec06661e38c19ea213a1c454e4dc45660