Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

34b80f9009...18.exe

windows7-x64

7

34b80f9009...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2024, 12:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    34b80f9009e082405ef72244c55a4e79_JaffaCakes118.exe

  • Size

    28KB

  • MD5

    34b80f9009e082405ef72244c55a4e79

  • SHA1

    524207da3931728f13831067ef480c5a180efc4a

  • SHA256

    a4e07e5f432a4e872740d6c952ac02476c22374d1bae138d55b9eebe7900e2b3

  • SHA512

    0ded1d0f4415d791a05d00c5f2c1c6d46db39abe0311965753de18757f9c3a1cf11319be4ccb872acf8ad7cc75d51ab5c65451d9faab323bc74b93dc2e8e6ab8

  • SSDEEP

    384:H/bf8HhtezkEM5+I4TVeKZQMCSsH5BE8Smda7LLenCn6BWUl2LeuWyK/WRD:fbf8Br5wTVeKeMVsHbEZmo7LKnM6afN

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\34b80f9009e082405ef72244c55a4e79_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\34b80f9009e082405ef72244c55a4e79_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:3476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3476-0-0x0000000000400000-0x0000000000424000-memory.dmp

    Filesize

    144KB

    Download

  • memory/3476-16-0x0000000000400000-0x0000000000424000-memory.dmp

    Filesize

    144KB

    Download