Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
16/06/2024, 15:12
Behavioral task
behavioral1
Sample
b42aad56d9e56485a74023ec4d84c8fd_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b42aad56d9e56485a74023ec4d84c8fd_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
b42aad56d9e56485a74023ec4d84c8fd_JaffaCakes118.pdf
-
Size
39KB
-
MD5
b42aad56d9e56485a74023ec4d84c8fd
-
SHA1
a1e4a93163deeab811c34d091a77cb72ce3696cf
-
SHA256
cd1bee1493ae7323bb60c1abf68e0b934f55fb8a4ebcb51edd9db5747e575f06
-
SHA512
55b607552d82b6d9267f552c7a615bfe0604d7288078696935d35b948b08f0a74615e6dc57e2244735b0ce17078ece326a04a1173beaad48ca37e34853324c50
-
SSDEEP
768:QgGzpDTpWvj3TMxaYjlAQht0qDd03eLeHoOQ43GIbSY3ruWMJIhfmmnGW45WxPTu:9GF/pLAQZDdReHoOnb3r5lhfVGW7NT4j
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b42aad56d9e56485a74023ec4d84c8fd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ccd6d3f4283c502af8896037278370c7
SHA124b9cdfb2452fe097db6cf308f214ad2e1301e48
SHA2562f5788bdf3a4aedb8b3628a6f80b71dc719243510eae36291b7fb29534cb021f
SHA512f2444f73990b988ac72eb54a2994e8474088cbe35f7886c330b50dd8941d66f8a0fd410b4b9194bc3dff0809ece8668d125a056270f89b073b43b659f83a6e3f