Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
15s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
11/07/2024, 13:20
General
-
Target
3949739d61f32fe0cc99b4b6cb80b25a_JaffaCakes118.exe
-
Size
40KB
-
MD5
3949739d61f32fe0cc99b4b6cb80b25a
-
SHA1
4499585e15c7ffc456eb257fed77656284d7f6be
-
SHA256
402c9d7918d26d5ee186305fa3cccc21f7156dad3e239ba9add1b2a8c69f8adf
-
SHA512
ae6c9dc4d7fb5d4a005abdfa7eb5404ee5fda6deca5b43de1eddb2007c15b3aae064e50771aa962f21389eab7cddfbf6813dccf06956e19d5cd45ce443525423
-
SSDEEP
768:ozrF5LDgHoXwEbWyXeL5chFONAdJGT9ibCkbpX5qBg3zaG:SF5wIg9y2ehiOJGybpsK3zd
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\3949739d61f32fe0cc99b4b6cb80b25a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3949739d61f32fe0cc99b4b6cb80b25a_JaffaCakes118.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
176KB
-
Filesize
12KB
-
Filesize
176KB