Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
02/06/2024, 02:01
Behavioral task
behavioral1
Sample
8c8b3953e6d05d0070f23c5b4ade389d_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8c8b3953e6d05d0070f23c5b4ade389d_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
8c8b3953e6d05d0070f23c5b4ade389d_JaffaCakes118.pdf
-
Size
46KB
-
MD5
8c8b3953e6d05d0070f23c5b4ade389d
-
SHA1
89df8019ebc055e619ab97f28cb76263c7776262
-
SHA256
d27941d08aae0bd7c9b0dcf2976da0a582ecd352b5c5925af23cbdaa85ecf314
-
SHA512
df06c9751b9aca1f1a67baabcb7592c3d7bf597de40a1aa649caac1721c3869c1e7fda45a7f84c059681139c04d900fe89d81f9d0b0db694c3e66aa2c5db6c65
-
SSDEEP
768:1gGzpDyBVksi8TS7yMimXYLVKLMsFMsIo/XwDvneWkmd9iqPIp4PYJz7QHjKTnj5:mGFm4FPIoIvNfQqPIp4P8E4+75k
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c8b3953e6d05d0070f23c5b4ade389d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f71ea141400b4196b9a6cc6721f3de45
SHA123f09d6bc821d768654cd26182cb7aafaf2e664b
SHA256e3fc3e740c67feb3ff2a33907a121fd568dcba9b31d6b7cdb2453041a9fdd601
SHA5124a1ffc1307abea6b0ea2a30b7abb73195456ad0a9b9d00f2835087cb1cb38611587cb2c59eaea3316475ea24ab5ebdba421180752c4dd18f4a221dab1c1cd63a