Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24/05/2024, 19:34
Static task
static1
Behavioral task
behavioral1
Sample
6f9c445075fbcb0b1d1e79a206fba955_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6f9c445075fbcb0b1d1e79a206fba955_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6f9c445075fbcb0b1d1e79a206fba955_JaffaCakes118.exe
-
Size
164KB
-
MD5
6f9c445075fbcb0b1d1e79a206fba955
-
SHA1
d4e33f445408c0e83602dc30a5f4720bdcf830c8
-
SHA256
35d7495465f7919bff315c6319d66c3c194e81a60c8c950db3eda854e4363fec
-
SHA512
0d42a17ebc756e887f171d3dc7fe66ed455631435fae0fd5377efbe2c6a91375a48c4aca391b40922277a8db58dfba1d4e52efe347e9c979c01b4a5e1a41795f
-
SSDEEP
3072:OdMVPgWgqBdt/u+yy60zI8xEtOrIFyXrq2a+KhRJcfDupNQOtj:OdMVNzu+byOrXrq2a+pfDpOtj
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1512 6f9c445075fbcb0b1d1e79a206fba955_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1512 6f9c445075fbcb0b1d1e79a206fba955_JaffaCakes118.exe 1512 6f9c445075fbcb0b1d1e79a206fba955_JaffaCakes118.exe