Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
12/07/2024, 10:41
General
-
Target
3d0ad9ac1b0901c9905df0e83eb7f319_JaffaCakes118.exe
-
Size
28KB
-
MD5
3d0ad9ac1b0901c9905df0e83eb7f319
-
SHA1
9eb8fe83bd4427d92c78820896139e26e01d6a23
-
SHA256
6cd87c5f6e388c5850735b3b3acacbdd5fcec75452220e17ce134bff91b9d150
-
SHA512
1644569881daa79fbbf6eadb536cb26cd13825239381d096484dcb4c92aa08cef572bb83177d73a83453634c4876816a7f05b552be30bcba02e30e1f95a74646
-
SSDEEP
768:zFPlsXm7Ztae2CA5JituN1dO1/+3keT7ioD:zFPlKMZtYCALO1mZTJD
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d0ad9ac1b0901c9905df0e83eb7f319_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d0ad9ac1b0901c9905df0e83eb7f319_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
MD5eec544805bc6b59f248ab9f3e3c36503
SHA15bbea2e6dd54b3b0b269045730ec73085481f25c
SHA256afbba145dac00b424b815fd90c05a5d27a2fbdf2f3143f04d3e630b4bd6e4d46
SHA51294d45a231dd88be1ac0a0dec553e547f7989018d1b87ecb70d82100d7490e1f703d63bad270b4c6a6687ec1227fbd59a04f37b59ee93619b67f05e60a7ab0fde
-
Filesize
112KB
-
Filesize
80KB
-
Filesize
112KB
-
Filesize
80KB