Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 16:41
Behavioral task
behavioral1
Sample
8b13f97fa1d54fcbd9b9ac55bf2c12e1_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8b13f97fa1d54fcbd9b9ac55bf2c12e1_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
8b13f97fa1d54fcbd9b9ac55bf2c12e1_JaffaCakes118.pdf
-
Size
60KB
-
MD5
8b13f97fa1d54fcbd9b9ac55bf2c12e1
-
SHA1
d3d17bc3bb5665834d41daeb9142746da674b5b0
-
SHA256
f34f79c427cdc23a495a49ef580af029bf2d4802e1f4f18c303348cbfdec7097
-
SHA512
b0d398b3f1d831160212c8384ab16e290a2fe1399273d3effa24d96d512c05acb455c77058aeec9157c1224f71976f8b3456df7b06d24200d90ca5b64910544e
-
SSDEEP
1536:1GFNzZUZo4K1+tR6mddXCu3gkjJe2KW0mryAzJsPl:IFNtao4KIddl02OmryAzJ8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1632 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1632 AcroRd32.exe 1632 AcroRd32.exe 1632 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b13f97fa1d54fcbd9b9ac55bf2c12e1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1632
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ea319306f98eec03b9dd709a3f07b794
SHA13e755170066b8ee44d8753da5b583df1e10ef6f9
SHA256bda6fbbd05a68c39efc040ccd85ce1d0ce9c6aa10e1ced9aff94a5bcf8b46453
SHA512bbcd454f7c0cd40a7cc316229c3470569beb5111c76cf0209a0f3ea5b0930b4fe672d95e2963a51456d3efcc4202fc17ff83ae1828cb5d8561d06a28593656c9