Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

0adef92214...18.exe

windows7-x64

7

0adef92214...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 22:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0adef922148edccc61919f5cbdb78fc1_JaffaCakes118.exe

  • Size

    21KB

  • MD5

    0adef922148edccc61919f5cbdb78fc1

  • SHA1

    3446cdbeb001f9cc4b41cd2293c3596e0ecdd57a

  • SHA256

    d72163d53bad9a7bb7a517e4b612dbfb28809454a9fce35cc0582983a5e3b464

  • SHA512

    7e0d38e731776a944c7c788509e704114382ff1303eaf2ff6031ef33391657ad67f03e0fe4af47e61ee53c0f85b88bed612b198ef1b589a727f39518a601bf4e

  • SSDEEP

    384:LX25t+K7MPxAeRPJFQCBf48+jMGvQ3OdXroO2T1BBwg4/MN38NJZ8DtnKCv7B2s:Lm5gDPmiPv7BfEMl3OdbB613wglN3qJ9

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0adef922148edccc61919f5cbdb78fc1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0adef922148edccc61919f5cbdb78fc1_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2236-0-0x0000000000400000-0x0000000000415000-memory.dmp

    Filesize

    84KB

    Download

  • memory/2236-3-0x0000000000400000-0x0000000000415000-memory.dmp

    Filesize

    84KB

    Download