Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
100s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
25/06/2024, 16:03
General
-
Target
0eaf16564f54529f3d0bf817bc70ad00_JaffaCakes118.exe
-
Size
195KB
-
MD5
0eaf16564f54529f3d0bf817bc70ad00
-
SHA1
aa8ac8236864944b5b03625616afeffa6a54b3bc
-
SHA256
4908edb3a7b733d96818404b6900af85328da23ca00acf7dd11c4159f4c81417
-
SHA512
4ed945fa4382067031021ef9cb728d0862b5cf823bb0e97df2a259daab2e15f0627fc9b29533e18c05d8c9c1ab1cb5cb4764cb3e235796643c19ea03e46ed5e9
-
SSDEEP
3072:yuruMRfoRwHB8a2+L9R57EtyjtmakGkp5+7xUH1PCvR4RxDmNN8+/:8XRwHt3H57pnO5+7xUIvRImNN5
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0eaf16564f54529f3d0bf817bc70ad00_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0eaf16564f54529f3d0bf817bc70ad00_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\splwow64.exeC:\Windows\splwow64.exe 122882⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc1⤵