Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
27/06/2024, 11:54
General
-
Target
15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exe
-
Size
56KB
-
MD5
15e8c155fe27e44bb78243ae34900332
-
SHA1
1f765693899a5d86cbebc679991dff014d53032d
-
SHA256
ed6a4b72d08a73d21663b9e84f8a7df83ab842d0801a266b45ff840d7bd0729b
-
SHA512
661c533d3db7d5bf57ac845aa6ac5535e3cc27792634c6cb68abf0e453bb8f66f9dcea949752d6b01fda89bd9b389ea7c814684a44db3fb771498e1bd60864b1
-
SSDEEP
1536:vMS8nY4bm2+JaZkdcZiIBrWn863EPIShH4H/RfMOA:vMS8tGd8isW3Q
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5324d1e12b90025accf64bdf058821e29
SHA121ff12ffdcab511cced251002a1281620c0677a7
SHA256514a7a3292c92043b996c079d3d203b6cc606e45262ccd898d922095df8a00da
SHA512625ca30b3a3ff5e57a1cdf3b34ea50d1ce8a1072534d6f037eb073dc13303f0b61457963d3222450a8e226b822c020ced02d71af6b209778bcc3db70800e33d5
-
Filesize
232KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
232KB
-
Filesize
232KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
232KB