Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 00:43
Behavioral task
behavioral1
Sample
ac476b8e4e361bc12010438b3a16df9f_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ac476b8e4e361bc12010438b3a16df9f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
ac476b8e4e361bc12010438b3a16df9f_JaffaCakes118.pdf
-
Size
52KB
-
MD5
ac476b8e4e361bc12010438b3a16df9f
-
SHA1
593ea0ad42875ce372e262a3251703a0716a507f
-
SHA256
804ea19362b49e7a4a6a5e382e28fbfff9db7e9f6d54656f4d42b76dcdb71531
-
SHA512
5517c2ea8c391b8b4473bdeddee440e56a04c4c1233985d3c72a910faa925a6b821980abdda93430ec154163ffc497dc3678ec73de20f06c2a4103c3b8755dc4
-
SSDEEP
768:z5gGzpDFek5eTnBdPcSiTi0Sj/Xk+FwDhkQoxHZOyxoQXfrlPhhHtQ71UH99lM5R:+GFBdyFVtZtxoErlDy1UHcqHP859
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac476b8e4e361bc12010438b3a16df9f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dd5a0d14858ab204ff61cc0709e9d149
SHA1f04f18187a81d7711474b46f85bcc125995fe573
SHA256a1d912f27929a9b65bb7773133090e612216031e518bc357e1e66ae14081f208
SHA512aac9368712ce03282afbc2634eb7388963f8e593b077572b3f6f08d17a20c5cc9f04b5954d35c0a7de0ccc99b82f5ebc9b3ade7cc82194067e016a308b976fac