Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
15s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 10:44
Behavioral task
behavioral1
Sample
3465dd11e4a9a70ee67555b8074a7129_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3465dd11e4a9a70ee67555b8074a7129_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3465dd11e4a9a70ee67555b8074a7129_JaffaCakes118.pdf
-
Size
79KB
-
MD5
3465dd11e4a9a70ee67555b8074a7129
-
SHA1
b0452e814bda6e166d27651753e4922ec8b6606d
-
SHA256
3281646d0a87cb77b745ac35f1e81cdd60c99305747a8def9712e473265deafc
-
SHA512
5fdfedd91e280da0c198b10947ac7e3cd061ad03cb5b59fd36926bcdcc41d099139c886c66a426d6c17bf49176c01bdd02b2adce29e4c4b33d290be47daa904a
-
SSDEEP
1536:jkxdOxzvRsbPRFHbPZB067VTzq/SaWOpOwrKWVJ+OCixmrFQyFusoSP8:2evORFHbT067VfnPwr/J+XigrFhFroH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3012 AcroRd32.exe 3012 AcroRd32.exe 3012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3465dd11e4a9a70ee67555b8074a7129_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3012
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e064ca0a625efc64b8ef389b82706401
SHA10a0e3684c9dfb3eab800934f08c8bfa76bf0d030
SHA2564970b723d35dddb444d405383eee576b8b7509a20fbb8a28d1aa392da232cdb4
SHA512d630c1e12c22a3651ff6348d8c49074cfabf26c3f4bfd375ec69feeede5b32c4dcc7a7c8694c930852f417a0445d64e1cd0568f8a0f4f7c24047fa58eacfb15e