Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    20/06/2024, 06:59

General

  • Target

    03d7f137c99ff295a14810c82ac80788_JaffaCakes118.exe

  • Size

    184KB

  • MD5

    03d7f137c99ff295a14810c82ac80788

  • SHA1

    4fdc8fcf59b86febe7b8c78cc9c3ec1e9a9730fe

  • SHA256

    a30ab76be17ae6075aa68927d762209b3633873bfc2d36258f6a0c577234f82b

  • SHA512

    4501674af09b76735fe842c9f6f6e26aa19961c6d18de572a52e31d9ed12db1e000044c10fc7e6471d8ad9f953919eb7ce098466cfc5333a7f13d66431d20022

  • SSDEEP

    3072:tf5QSk6r5LOIGLdaHKZV20TGyfs6YhN9M3NT4Y3Srz91HruDqdqdzKEyRiv:tfmEqZ/GyfigaY3SF1Hegqd4Ra

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\03d7f137c99ff295a14810c82ac80788_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\03d7f137c99ff295a14810c82ac80788_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2016 -s 188
      2⤵
      • Program crash
      PID:1432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads