Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
23/06/2024, 23:40
General
-
Target
04715ed8bb54677fd5d24a70002d77c3_JaffaCakes118.exe
-
Size
601KB
-
MD5
04715ed8bb54677fd5d24a70002d77c3
-
SHA1
4a113241a56f1fb741efefeccab1d76f86106451
-
SHA256
c9980200b6140c26be3e053c741c0258681fb7ededf817b14a73ff6256ede5c5
-
SHA512
138df2a45ad3da5e4f247487851072c8f5c7cc3aab91f5d6e291f887ebdd112c24bb7677541f804484889dd812547aeecb365f7d493a0faee4df559e660bd224
-
SSDEEP
12288:wE40e6cRHluShqFQ+Adh5LzgfYTvsE+Z+KmHSsxgYaetM:M0cHuSwsdDL8YsM/txgFJ
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\04715ed8bb54677fd5d24a70002d77c3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\04715ed8bb54677fd5d24a70002d77c3_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
MD5149fb14b5e190f0d1936b083690a14dd
SHA14dcb940918438f0b0225128e99d8534689566294
SHA256562296b32e06bf45a402051e00f1e8a3381f079880b1dc34c6c56b188cc9f4a3
SHA512d6ee05d76199ca3ab15e409eedea8bf783614a375349f8260c5d0a33e9b97861cb8f7984d76d1aa21fa557448e267f1cd38a00bd558682e935ad211180cf02ea
-
Filesize
588KB
-
Filesize
112KB
-
Filesize
588KB