Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
10/06/2024, 13:33
Behavioral task
behavioral1
Sample
9ad3cb12fbc4d20dcc301430c37b2171_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9ad3cb12fbc4d20dcc301430c37b2171_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9ad3cb12fbc4d20dcc301430c37b2171_JaffaCakes118.pdf
-
Size
46KB
-
MD5
9ad3cb12fbc4d20dcc301430c37b2171
-
SHA1
481a5a7ed9af5d1a3e3eb1507fb9dc4bb84d4b30
-
SHA256
566158a1bea9a432223a210bda22765e91354b816d4cf813371f6a20220b8d79
-
SHA512
7825cefddbab1ad455d06ced645b7093267919d1291ae0d3e0fafdf792e575a3127e22a62ac7d9140902dd45d75fe1eca871343a96e0d5584aa122b826453f96
-
SSDEEP
768:7gGzpDAe/IEIBmmekRJZsqyxFg+3DrNMnFknVaZoZkCBKkWwDLyGluSzBI:EGFceVK+XUWn2INgVwDLyGluSzBI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1392 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1392 AcroRd32.exe 1392 AcroRd32.exe 1392 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9ad3cb12fbc4d20dcc301430c37b2171_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1392
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56968812213422df412df5859f7b8abb2
SHA179715834d4ef4fcb91df7b0173fa0461e5aefcea
SHA25625da1d4f33aa2d77744d773426ccea18e567855d796403e899f3092b8cd9aad0
SHA512d1d3e8940cd9cdd5999aa56662e8b650210bdf444c2b014ea58f3cf313dd0e435c16eb8e61755095a8b5d6c1aa0c137c420a116955c56c580b94de14cd07d4fc