Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
02/06/2024, 09:20
Behavioral task
behavioral1
Sample
8d9760814ef3c35d5ce6d5055c98b17a_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8d9760814ef3c35d5ce6d5055c98b17a_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
8d9760814ef3c35d5ce6d5055c98b17a_JaffaCakes118.pdf
-
Size
49KB
-
MD5
8d9760814ef3c35d5ce6d5055c98b17a
-
SHA1
445518f85a54c5e74792072496bbdd63550d8ab1
-
SHA256
7f8acd42e49c84a23deece8c63f623d173b63bd906bcf025975b91d5712551c1
-
SHA512
46f4f7c7b9cdabcf078954065415b04b3ea22c55c7380bf759e37aae5c1de3a94162e5b72d958fe1f229c9cf0e800dbc923f502737dd0f8747e8d1387afcf843
-
SSDEEP
1536:QXFZmGWSdg1PIdZ2RtTY0JhZIoFRN05mnA/VFbv2nWj6d/pgUxRtRpSo:OysdgkeRNOP/zbv2Dd/pgmRtRp3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8d9760814ef3c35d5ce6d5055c98b17a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5728a42ae6199c28645d9121f5e92c86f
SHA17b9a1be8b9279ea1506b4228c0d2c2702addc1c2
SHA256e7a415cca8df475c90fcf9a3dc92ccf6cf63e1acbbd4b948efaf891f7be4d026
SHA512506eb03f3f07a18b310eb863c7c9130d25c718e24891764396c5d1cfc8d069da56fd71163c3e82ad4612f39554995977a55e6d190cb23aa0ebbdb4d8d3021dae