Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
04/07/2024, 00:09
Static task
static1
Behavioral task
behavioral1
Sample
23f52400f13b5f407d84ccc87f84d641_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23f52400f13b5f407d84ccc87f84d641_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23f52400f13b5f407d84ccc87f84d641_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
23f52400f13b5f407d84ccc87f84d641
-
SHA1
295b2ebb204af6fc438959108ec2bcfe05a58e2e
-
SHA256
d2c843fdce934c1c00ba43e3e0e35a7737dbeeee95aee1eebd5dace7e7992e2c
-
SHA512
ae6572be527bfb6516e2d2231eed76fa8e3c2921a432c4e99c034044ca653ff713f72ad742b99cc43d41e2342b9c4f7fe450377e8cc6f4788d6b5a5d876b5865
-
SSDEEP
24576:L2gkfqixLpp2jt866yHPYqkll++vjUzEoc3lhymNolKwd:qxLujyryvYqkPhUOlh3NMfd
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1304 23f52400f13b5f407d84ccc87f84d641_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\23f52400f13b5f407d84ccc87f84d641_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\23f52400f13b5f407d84ccc87f84d641_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1304
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4608,i,1305347165619645738,15927664461101562802,262144 --variations-seed-version --mojo-platform-channel-handle=4112 /prefetch:81⤵PID:3088