Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 19:22
Static task
static1
Behavioral task
behavioral1
Sample
31a85cb2e2ed11b306bd816833c7b567_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31a85cb2e2ed11b306bd816833c7b567_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31a85cb2e2ed11b306bd816833c7b567_JaffaCakes118.exe
-
Size
19KB
-
MD5
31a85cb2e2ed11b306bd816833c7b567
-
SHA1
0934a74deaf097b48ae4be998816b3dc410452de
-
SHA256
09e362169ad4ab9aa42882302abcdbacad7a0f74c8e17b9f8bd3f2f31bb0dd70
-
SHA512
ef15bd16cd42ea0d2229c93d1a26cd64c24719bbf69d25977b123ed97c6685d89ccab874ac18834fe87da4a2d1942caf7dd16cf4bedf9a9e414ee1f1f7065fc5
-
SSDEEP
384:R68/+cw0IUZnYwx1wHtpOU3uvuoEy2/1cVp/WswD1KGqgJj3j:wS+AsNpy9iOpesw6OjT
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x000b00000001225f-3.dat acprotect -
Loads dropped DLL 1 IoCs
pid Process 1488 31a85cb2e2ed11b306bd816833c7b567_JaffaCakes118.exe -
resource yara_rule behavioral1/files/0x000b00000001225f-3.dat upx behavioral1/memory/1488-5-0x0000000000290000-0x000000000029F000-memory.dmp upx behavioral1/memory/1488-7-0x0000000000290000-0x000000000029F000-memory.dmp upx behavioral1/memory/1488-11-0x0000000000290000-0x000000000029F000-memory.dmp upx behavioral1/memory/1488-25-0x0000000000290000-0x000000000029F000-memory.dmp upx behavioral1/memory/1488-31-0x0000000000290000-0x000000000029F000-memory.dmp upx -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1488 31a85cb2e2ed11b306bd816833c7b567_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1488 31a85cb2e2ed11b306bd816833c7b567_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15KB
MD536b9ec62e1c2f0c309f28ba990f11450
SHA1795e38fa6af1e8ffe906e98d26a67d4cca942960
SHA256b347a93fd2aee6de81ddb55e0db1c53f1039da1360c87f3a69bab9773dbee6ac
SHA51237763dde7e444a6165a78fd377e172a8cb61986b86c425e6a7054303170a7b2b9988cc99c32a5265ca576e130ba66c563af145471c7d15816e5ceb75d9a0d0eb