Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 08:45
Behavioral task
behavioral1
Sample
912ae5c5e3ea1404935196241ad2b016_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
912ae5c5e3ea1404935196241ad2b016_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
912ae5c5e3ea1404935196241ad2b016_JaffaCakes118.pdf
-
Size
95KB
-
MD5
912ae5c5e3ea1404935196241ad2b016
-
SHA1
dfea21b25d5de18da0810b350ac76f1edf3461eb
-
SHA256
d0a6563224b961ff4fd784fbc8d51996d76fee67cece17a6cbb40c5366547033
-
SHA512
67b313bb58fcc7493d84a543fd15cb1e83ce56e95f1b49824c2bba3ae4ab296d33be03cd5a91ec2822cb07c4d4a2b6117cca3042fa2be4f87ada6635289ea905
-
SSDEEP
1536:GGFzpIs16NXBdtMx0ukAuISJxyx6UMioEKqQP9gH18tQIZFb1fI7Sy8HFD7cy7+y:fFzp56NXqxaISmsYH9QFgHCmW/8Sy8Hb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2364 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2364 AcroRd32.exe 2364 AcroRd32.exe 2364 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\912ae5c5e3ea1404935196241ad2b016_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2364
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD529d96dc339594600b7a5514ea6da385f
SHA18b820d5ce5e060df699b0e3981c4072b6cbb3539
SHA256743b09700baeaedbf1fe1201ea26cd5e88e8a34fb9dd018405d4497fcfecb673
SHA512cd836fa6288c52bff46dbed6879ee11565b3267ea6083132f3c4afe0556e11da033e44d30baeb0bc2f46ac40d5f8d2a7491864451d02f098c65c5983dd6ba37c