Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 01:40
Behavioral task
behavioral1
Sample
9024a21ccf1b7609e56e11a3aedd2469_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9024a21ccf1b7609e56e11a3aedd2469_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
9024a21ccf1b7609e56e11a3aedd2469_JaffaCakes118.pdf
-
Size
45KB
-
MD5
9024a21ccf1b7609e56e11a3aedd2469
-
SHA1
24e62ddd71f021d1255756718ae42a01abefba28
-
SHA256
b0bbdce03ab7c7631cdf59e7301dbc6fcdaa63cd6c3669196c8347b1d987bfdc
-
SHA512
34c8a592ea585834826060fbcc0a067374b1fd173dc7ff94b97729df69147b5b0bc5775d1f8ed8da05bacbe9bd4336eed39021fa49f052219ff668ede849d4be
-
SSDEEP
768:rgGzpDaIFMJ3N6ERv7ZZOyuu1RXZUoWSV7TQVM4xMWy/k30a8XU6qYjr:UGFWIcP3vhTQzxC830XXUDYjr
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2936 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2936 AcroRd32.exe 2936 AcroRd32.exe 2936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9024a21ccf1b7609e56e11a3aedd2469_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b01ec7cec4d5650af6417732347992f5
SHA1827d8558b3e94eb14c10e8c256d930508e3a7aa3
SHA2560c9b48bee9ad85972a33b4aa2a48de993dd7b1dbddc9b2a55f1455641d137985
SHA512ad42ac0e3b825ab33ed7591ae2adeb837585a0c905352434ffe473c979365f2d229564bafc3a1ecaad20de2d56b7b81549fd486a021e1be717095fe030c2ca4f