Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 10:53

General

  • Target

    2c0e54e8c4dca547f08b952f822f3c43_JaffaCakes118.dll

  • Size

    48KB

  • MD5

    2c0e54e8c4dca547f08b952f822f3c43

  • SHA1

    1f8db3cdac2d07a0fdf25c3c08347a897e815237

  • SHA256

    8488e66f84ce75b8376e1d935f312dc4c5dcfedbbedf3b5d254104b2ab326fe9

  • SHA512

    b20162c749aff4636b59b2d29c2732fccd3db1813f0c78d983ebb3a9300a20376e3f8b30182e4fa566113fc799af8b94837df810f3359fc9f859545b39e4b43a

  • SSDEEP

    768:EUBfYPo11DoyZi/uhMnBLcUr5smuQCdgzgW5gr+py00QbVp2pWrMwRQA:aPQDoyFMnVcUfc0grg/bVk6MwRQA

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2c0e54e8c4dca547f08b952f822f3c43_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\2c0e54e8c4dca547f08b952f822f3c43_JaffaCakes118.dll,#1
      2⤵
        PID:1804

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1804-0-0x0000000010000000-0x0000000010021000-memory.dmp

      Filesize

      132KB

    • memory/1804-2-0x0000000010000000-0x0000000010021000-memory.dmp

      Filesize

      132KB

    • memory/1804-1-0x0000000010000000-0x0000000010021000-memory.dmp

      Filesize

      132KB