Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
01/07/2024, 21:11
Behavioral task
behavioral1
Sample
1c839adce96777a7a51b8e84b2f448c3_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c839adce96777a7a51b8e84b2f448c3_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
1c839adce96777a7a51b8e84b2f448c3_JaffaCakes118.pdf
-
Size
16KB
-
MD5
1c839adce96777a7a51b8e84b2f448c3
-
SHA1
b143f4e097c94da1c3580167d077315110e9a332
-
SHA256
a0435d709c49918ea00c85e25022a5916865c52018c2ff7c784ec837a486faeb
-
SHA512
8237453145490a0ff903bd598622db3486e41ecd95b35bcd1f38f675fcf0fee725648b7abd3649967412d67104685b3d574ffecbd5b420e6a4a2515f9cfac30d
-
SSDEEP
384:5PV1n1TGeSehE+JmS65SMaMzGzEn2P/eDBuSvuIzzGdGGYG:x1T7XEmX5MS423BSvuIWZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2852 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2852 AcroRd32.exe 2852 AcroRd32.exe 2852 AcroRd32.exe 2852 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c839adce96777a7a51b8e84b2f448c3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2852
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD565a7a499208e8b2de307beb40a881e89
SHA14a61497d9d3e833363a3daa413cba8c1c0b688c2
SHA256f6990f89db1dc32f5378385bbff29e0d12a4299d9f835298516defc4cc87e951
SHA51269a3ac713ab9978a7f796266dbdf7601a36b307e391f6bdcda4df22354e6fbff759ef1846538398130dbab04d768b53cd559d1d5c5222a1087cd989d502c346b