Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 23:00
Behavioral task
behavioral1
Sample
3254ce3a39e8aaedfeb50f8c44ada36f_JaffaCakes118.exe
Resource
win7-20240704-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3254ce3a39e8aaedfeb50f8c44ada36f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
4 signatures
150 seconds
General
-
Target
3254ce3a39e8aaedfeb50f8c44ada36f_JaffaCakes118.exe
-
Size
294KB
-
MD5
3254ce3a39e8aaedfeb50f8c44ada36f
-
SHA1
050e2e4c3dc78ef0a099f5adf7673f0d2700b605
-
SHA256
f7e9ae214680b8c2528031ecd602f1fc42e8bd69fbe110df4c550b8753fef9e8
-
SHA512
2f6a2818bfd882a9bd3561d00fa93c3100c1faa45c79e66a9b04c44019392744cb1e5b127c1795e26d89fb36b2459a33148cb4eb627d83491b973a64e88e185f
-
SSDEEP
6144:SB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSoteL:SaD4ZieSgp/FeH75J7CceoSo0L
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2604-0-0x0000000000400000-0x00000000004D6000-memory.dmp upx behavioral1/memory/2604-13-0x0000000000400000-0x00000000004D6000-memory.dmp upx behavioral1/memory/2604-14-0x0000000000400000-0x00000000004D6000-memory.dmp upx -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main 3254ce3a39e8aaedfeb50f8c44ada36f_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2604 3254ce3a39e8aaedfeb50f8c44ada36f_JaffaCakes118.exe 2604 3254ce3a39e8aaedfeb50f8c44ada36f_JaffaCakes118.exe