Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
23s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
10/07/2024, 11:03
General
-
Target
34735acfed3701682a652e12c40a0e4d_JaffaCakes118.exe
-
Size
104KB
-
MD5
34735acfed3701682a652e12c40a0e4d
-
SHA1
73e8e7c005268eb4a8b4b7483b6d9dafa7bd942d
-
SHA256
474d48b9d49b836488890565ab90f866c865dfd5b37d42c0b73776fb5c89caff
-
SHA512
823218e27739c9ec56a31469efd2b755d02eacfbbe2442dba3e472e6a8c2941f86ac43f1218363287401d803f041aaec71072acb7cb4644029d10ef98f00cbf3
-
SSDEEP
1536:/7DHEs7IOyQ9mtYFpDaau/2BXohqcccfB6/SbKy++6ujCe6y:XkkIO06sa22xohqzcfuSbEBuj7P
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\34735acfed3701682a652e12c40a0e4d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\34735acfed3701682a652e12c40a0e4d_JaffaCakes118.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
-
Filesize
172KB