Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28/06/2024, 13:15
Behavioral task
behavioral1
Sample
1a41d749546e8ac96b91c3c565090cc6_JaffaCakes118.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a41d749546e8ac96b91c3c565090cc6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
-
Target
1a41d749546e8ac96b91c3c565090cc6_JaffaCakes118.exe
-
Size
16KB
-
MD5
1a41d749546e8ac96b91c3c565090cc6
-
SHA1
a2cd22eeff0c32907a05066d91bda7ca42d55f26
-
SHA256
05426a263f7d88314ff391fa866e760f12f213316020fee85d52541c4cfccd06
-
SHA512
b7a3aeedc7e4aa927b2e999c1d15e51011df48f42394da10deb1ce018f44b264071dd5eeffc41b0bbedf8bf5bb360859c8d4aeb8e5faa82d4927e1802bd77154
-
SSDEEP
384:Ms73ITlGotEkb+82jDyUzTsGnpblOxA/rnIyZE/:MskTlptojOUzT/llOxGrny
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2472-0-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-3-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-6-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-8-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-9-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-10-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-11-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-14-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-15-0x0000000000400000-0x0000000000419000-memory.dmp upx behavioral2/memory/2472-16-0x0000000000400000-0x0000000000419000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2472 1a41d749546e8ac96b91c3c565090cc6_JaffaCakes118.exe