Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2024, 06:08
Static task
static1
Behavioral task
behavioral1
Sample
37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe
-
Size
93KB
-
MD5
37fcae35d698c524224fdabf5a37741e
-
SHA1
d3d090339e82825f0f984c42c757abec1b50bd87
-
SHA256
bf75394af910e29311d5bb7038419af77b6d6eb3b48cd1ada625b0ff5a6007bf
-
SHA512
7e6c786b06110320aee499a1b6174792d74a3b09d6a1de47a55202a7201ed0a82e35fec8155d7daa158ccf3846f2233ae43460d6139a9fdbb6a67cfe33b20663
-
SSDEEP
1536:q1aouX1AzbCDIMf2W5fc9Ppf2Zv/f6EV0/jPRDe9IhCAq1a2D4FCID11VAj:qMouCbCD/5fohov6MI8aAaE4FpVO
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\sUvrTqasuikk 37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe -
Drops file in Windows directory 4 IoCs
description ioc Process File created C:\Windows\msagent\remony.lo 37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe File created C:\Windows\remony.ico 37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe File opened for modification C:\Windows\hh.log 37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe File created C:\Windows\msagent\remony.exe 37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5036 37fcae35d698c524224fdabf5a37741e_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
126B
MD5edb18a436af138c44b37cf482817e1e3
SHA11e51b9eb7846656e13221d67af610ceeed9e04de
SHA25609a42b4a7b73978089ee295c929866555f0ac5c386947f26db4203fd5b4a4baa
SHA5126873bc50c05b31d0235085b976d2eec9b75481e9b7e747c2eb1d69c7fda445d22f770083c7a0a867569dd77ac13ca6dee40bd995751560a3bcf3c21d688d75dd