Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
02/06/2024, 11:25
Behavioral task
behavioral1
Sample
8dea196dcedda7722abef53f7d02f2a3_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8dea196dcedda7722abef53f7d02f2a3_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
8dea196dcedda7722abef53f7d02f2a3_JaffaCakes118.pdf
-
Size
44KB
-
MD5
8dea196dcedda7722abef53f7d02f2a3
-
SHA1
ccbbf961130c45e6a3af65e20c7c4524b137d72d
-
SHA256
c57a3ed939893a25dad3a0fc9823462a7021e27f18463ba227357a80dc0f78c5
-
SHA512
57668a42dcc73832904ec4557f700352e3cc23eac13490c507cd29b8bafc0e8a7753ccbca9cbe86ac1ac995803c8039cae602dd94e512b436badcffff13250e7
-
SSDEEP
768:wgGzpD1fUtwP4ibRIcVGLvlQNUqxHGcVq6LqudTDEgbjiO3i5kF:dGFxQLv6m6LqoTDbbR3i5kF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1700 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1700 AcroRd32.exe 1700 AcroRd32.exe 1700 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8dea196dcedda7722abef53f7d02f2a3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1700
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e0af1c6ad12381394ef3b0de59cde52d
SHA1c4daa9632e33a50db117d4df9081e162d9f2172b
SHA2562e0f893f86b36d7a237baa024491e7f285e1dab3ed2eaa68b192b4f6c3fa8428
SHA512176f0aea5c0097746256c380786f6a08cf4447f2caa3f6243c72a2b6585019fe2d973f3b553b87c37553a93acc91875e89e362e547b83c2fb8cb2e5585dc183c