Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
27/06/2024, 11:54
General
-
Target
15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exe
-
Size
56KB
-
MD5
15e8c155fe27e44bb78243ae34900332
-
SHA1
1f765693899a5d86cbebc679991dff014d53032d
-
SHA256
ed6a4b72d08a73d21663b9e84f8a7df83ab842d0801a266b45ff840d7bd0729b
-
SHA512
661c533d3db7d5bf57ac845aa6ac5535e3cc27792634c6cb68abf0e453bb8f66f9dcea949752d6b01fda89bd9b389ea7c814684a44db3fb771498e1bd60864b1
-
SSDEEP
1536:vMS8nY4bm2+JaZkdcZiIBrWn863EPIShH4H/RfMOA:vMS8tGd8isW3Q
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\15e8c155fe27e44bb78243ae34900332_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD50a93eedb2c69abef8612d94637f30899
SHA1ab0c2ebe5f944fd323d69288263c67ad3149810e
SHA2567ca85bbf6a547bf6e939b9c0ffd0a3625ba0671762953ef9e4ef6c9161f3b3b6
SHA512269e9ef8985d20668f15d2389cefcb70f0794ac97d05d5f47b44f3481bcdefa1c85087194ddcfcbbc2a4791b9d613ec08c0b8ce4107a80a96560e26b6f3c7e38
-
Filesize
232KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
232KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
232KB