Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 06:53
Behavioral task
behavioral1
Sample
3c608182b92c88bbe9cf04df080e9922_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c608182b92c88bbe9cf04df080e9922_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3c608182b92c88bbe9cf04df080e9922_JaffaCakes118.pdf
-
Size
64KB
-
MD5
3c608182b92c88bbe9cf04df080e9922
-
SHA1
1b71edac2b64c7c3ddf32c3347c2a1bde25c10fb
-
SHA256
28ad3f4ba08629d607b54780b42c9c65880aa75e4515f76d033b8f5711727871
-
SHA512
27885bd322cd41724421e63fc525d408588f268ac1052bf9d0fda7e1fa44872a76e64be0c9b5b0773b08bd0f236885cd953a08f3d7f85f4333a4cd6ee365fa9f
-
SSDEEP
1536:KV0isA83j7GPbu4O4BJELIR3mV9zf3O51KLMZWCpOViIWd0GRuO:W0ir8z7Gy4OCJB0zf3O51qVirRT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c608182b92c88bbe9cf04df080e9922_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD518a570ef0c13305ccafb12e222e3a3d4
SHA1b72c331911c00d79b68a8c99981f7ea2c7720ea2
SHA2568c92297564dfe1d64b01cac292788f107b5eebe16cdf756c0a992eb9c2650683
SHA5122246a206097acb5207cbb0955c8f6f63aa6752b4acee34dbd603d89cbabe334c9154ed415f749e6f8bab146fc01e4dd1184e84eb0f2efe0e06299f718967195b