Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 04:54

General

  • Target

    18d8daa1aeb88f727a04ff2db7e0a421_JaffaCakes118.exe

  • Size

    227KB

  • MD5

    18d8daa1aeb88f727a04ff2db7e0a421

  • SHA1

    85b5a6788f210088b66d98ce5886d0f3f00d486f

  • SHA256

    560a4417030b62c1fed45f384dad7d541f5e33a4221428e54298b62c5f2d5415

  • SHA512

    04bf470a1f79023cfc44af1d4345d6c1402499114a38b1e11d4bf62d0f8f58d8629af575995922fe9cbb1256f72f202542ec00f6ad5d55fea31ea9b61b84886b

  • SSDEEP

    3072:dx9DDnY+e5dHXzLsBm/Jvc2J/nOo2FGS/rgm6DNDE8UCiWg:dx9DzFM315ceJ2c/NQ8UCiW

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of UnmapMainImage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\18d8daa1aeb88f727a04ff2db7e0a421_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\18d8daa1aeb88f727a04ff2db7e0a421_JaffaCakes118.exe"
    1⤵
    • Suspicious use of UnmapMainImage
    PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1928-0-0x0000000000400000-0x000000000043A000-memory.dmp

    Filesize

    232KB

  • memory/1928-2-0x0000000000230000-0x000000000026A000-memory.dmp

    Filesize

    232KB

  • memory/1928-1-0x0000000000230000-0x000000000026A000-memory.dmp

    Filesize

    232KB

  • memory/1928-3-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/1928-4-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/1928-9-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB