Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
14/06/2024, 14:06
General
-
Target
aa164214ff5f6af2f4e28b6aa6d25e1b_JaffaCakes118.exe
-
Size
5.8MB
-
MD5
aa164214ff5f6af2f4e28b6aa6d25e1b
-
SHA1
7da12991c2c96006baaaf6fd0fed7e3ee7aa91e0
-
SHA256
67118bd39edf4136eea323c53d9381ffb2878c4d1fe875c8a969f820d07d79a6
-
SHA512
b20f5aa114c8c972e7465de2c659fa30aabeb307806cc4517101a0f7b6ac7be9e4a33217f3b80c02b6f7d121f897deb3a97987eea6527e1e92d4b884dcce6490
-
SSDEEP
98304:NMp5EBCoIyyx2JJDNC/LyBC2/54F4AWUi91BiQzFuoUINnfK170otkKZkLScOFjT:NMpSBCoIbx27DNC+54Fhy1Lzopua70W+
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa164214ff5f6af2f4e28b6aa6d25e1b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\aa164214ff5f6af2f4e28b6aa6d25e1b_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
100B
MD5609971b218756104000dece3400e89a0
SHA19cb55afaf250542c24b3bdbab0e031a0ac6d1e9d
SHA256b123a7946fc86362df6aef429cf7776aa749814a8d5d6218d503e0ee70e7b9c1
SHA51211f5a4889b953c59e22b73261d832d1f99b1f0afb2058d041b0e7511e5db6e02a916007f728806d30e2830da8a81afd9aa8d37676789ce8d83d359e12ae1bce4
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
3.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
10.7MB
-
Filesize
8KB
-
Filesize
10.7MB
-
Filesize
3.8MB
-
Filesize
10.7MB