Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 13:46

General

  • Target

    3d9f67ad3d4a24ff63941aec7e8451d1_JaffaCakes118.exe

  • Size

    35KB

  • MD5

    3d9f67ad3d4a24ff63941aec7e8451d1

  • SHA1

    6afbcad91f0c9e2f6c500e13f010ee9d48bf9045

  • SHA256

    da54c5b84893d12a52e79f16ab3a2316994ea5f5da0baf0a731631c46e0b3284

  • SHA512

    29f5b31f576f00dc72029ea799c85fa135fc0683558717c95fd056e3db73b704ae889523b08d1acf5d5218e0012916aa0731781b3a95065a1377cf14311d17c2

  • SSDEEP

    768:RtZjQitzadUvz5fQRBJIr1YnLJjOiBU3t5782mmL:RtZjQiNsUVfQRcrYjOiBU3t5JL

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 4 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d9f67ad3d4a24ff63941aec7e8451d1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3d9f67ad3d4a24ff63941aec7e8451d1_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2116-0-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

  • memory/2116-2-0x0000000001ED0000-0x0000000001F0E000-memory.dmp

    Filesize

    248KB

  • memory/2116-1-0x0000000001ED0000-0x0000000001F0E000-memory.dmp

    Filesize

    248KB

  • memory/2116-3-0x0000000001ED0000-0x0000000001F27000-memory.dmp

    Filesize

    348KB

  • memory/2116-12-0x00000000003F0000-0x00000000003F7000-memory.dmp

    Filesize

    28KB

  • memory/2116-11-0x0000000001EA0000-0x0000000001EB2000-memory.dmp

    Filesize

    72KB

  • memory/2116-10-0x0000000001EA0000-0x0000000001EB2000-memory.dmp

    Filesize

    72KB

  • memory/2116-9-0x0000000002FA0000-0x0000000003029000-memory.dmp

    Filesize

    548KB

  • memory/2116-8-0x0000000001ED0000-0x0000000001EFF000-memory.dmp

    Filesize

    188KB

  • memory/2116-14-0x0000000001EA0000-0x0000000001EB5000-memory.dmp

    Filesize

    84KB

  • memory/2116-15-0x0000000001EA0000-0x0000000001EBE000-memory.dmp

    Filesize

    120KB

  • memory/2116-13-0x0000000001EA0000-0x0000000001EB7000-memory.dmp

    Filesize

    92KB

  • memory/2116-18-0x00000000003F0000-0x00000000003FB000-memory.dmp

    Filesize

    44KB

  • memory/2116-17-0x00000000003F0000-0x00000000003FB000-memory.dmp

    Filesize

    44KB

  • memory/2116-16-0x0000000001ED0000-0x0000000001F17000-memory.dmp

    Filesize

    284KB

  • memory/2116-7-0x0000000001ED0000-0x0000000001F26000-memory.dmp

    Filesize

    344KB

  • memory/2116-21-0x0000000001EA0000-0x0000000001EBB000-memory.dmp

    Filesize

    108KB

  • memory/2116-20-0x0000000001EA0000-0x0000000001EB9000-memory.dmp

    Filesize

    100KB

  • memory/2116-23-0x00000000003F0000-0x00000000003F9000-memory.dmp

    Filesize

    36KB

  • memory/2116-22-0x00000000003F0000-0x00000000003F9000-memory.dmp

    Filesize

    36KB

  • memory/2116-19-0x0000000001EA0000-0x0000000001EB9000-memory.dmp

    Filesize

    100KB

  • memory/2116-6-0x0000000002FA0000-0x000000000301B000-memory.dmp

    Filesize

    492KB

  • memory/2116-5-0x00000000003F0000-0x00000000003FA000-memory.dmp

    Filesize

    40KB

  • memory/2116-4-0x00000000003F0000-0x00000000003FA000-memory.dmp

    Filesize

    40KB

  • memory/2116-27-0x0000000001ED0000-0x0000000001F18000-memory.dmp

    Filesize

    288KB

  • memory/2116-28-0x0000000001ED0000-0x0000000001F18000-memory.dmp

    Filesize

    288KB

  • memory/2116-37-0x00000000003F0000-0x00000000003F8000-memory.dmp

    Filesize

    32KB

  • memory/2116-39-0x0000000001EA0000-0x0000000001EB2000-memory.dmp

    Filesize

    72KB

  • memory/2116-38-0x0000000001ED0000-0x0000000001F1C000-memory.dmp

    Filesize

    304KB

  • memory/2116-36-0x00000000003F0000-0x00000000003F4000-memory.dmp

    Filesize

    16KB

  • memory/2116-44-0x0000000001EA0000-0x0000000001EBD000-memory.dmp

    Filesize

    116KB

  • memory/2116-46-0x0000000001EA0000-0x0000000001EB2000-memory.dmp

    Filesize

    72KB

  • memory/2116-45-0x0000000001ED0000-0x0000000001EFA000-memory.dmp

    Filesize

    168KB

  • memory/2116-43-0x0000000001EA0000-0x0000000001EB7000-memory.dmp

    Filesize

    92KB

  • memory/2116-48-0x0000000001ED0000-0x0000000001F2E000-memory.dmp

    Filesize

    376KB

  • memory/2116-47-0x0000000001ED0000-0x0000000001F2E000-memory.dmp

    Filesize

    376KB

  • memory/2116-55-0x00000000003F0000-0x00000000003F9000-memory.dmp

    Filesize

    36KB

  • memory/2116-61-0x00000000003F0000-0x00000000003FA000-memory.dmp

    Filesize

    40KB

  • memory/2116-60-0x00000000003F0000-0x0000000000400000-memory.dmp

    Filesize

    64KB

  • memory/2116-69-0x0000000001EA0000-0x0000000001EB6000-memory.dmp

    Filesize

    88KB

  • memory/2116-71-0x0000000001EA0000-0x0000000001EB8000-memory.dmp

    Filesize

    96KB

  • memory/2116-70-0x0000000001EA0000-0x0000000001EB8000-memory.dmp

    Filesize

    96KB

  • memory/2116-68-0x0000000001EA0000-0x0000000001EB6000-memory.dmp

    Filesize

    88KB

  • memory/2116-67-0x00000000003F0000-0x00000000003FF000-memory.dmp

    Filesize

    60KB

  • memory/2116-66-0x00000000003F0000-0x00000000003FF000-memory.dmp

    Filesize

    60KB

  • memory/2116-65-0x0000000001EA0000-0x0000000001EBE000-memory.dmp

    Filesize

    120KB

  • memory/2116-64-0x0000000001EA0000-0x0000000001EBE000-memory.dmp

    Filesize

    120KB

  • memory/2116-63-0x0000000002FA0000-0x0000000003023000-memory.dmp

    Filesize

    524KB

  • memory/2116-62-0x0000000002FA0000-0x0000000003023000-memory.dmp

    Filesize

    524KB

  • memory/2116-59-0x00000000003F0000-0x0000000000400000-memory.dmp

    Filesize

    64KB

  • memory/2116-58-0x00000000003F0000-0x00000000003F9000-memory.dmp

    Filesize

    36KB

  • memory/2116-57-0x00000000003F0000-0x00000000003FB000-memory.dmp

    Filesize

    44KB

  • memory/2116-56-0x0000000001ED0000-0x0000000001F17000-memory.dmp

    Filesize

    284KB

  • memory/2116-54-0x0000000002FA0000-0x0000000003012000-memory.dmp

    Filesize

    456KB

  • memory/2116-53-0x0000000002FA0000-0x0000000003012000-memory.dmp

    Filesize

    456KB

  • memory/2116-52-0x00000000003F0000-0x00000000003F8000-memory.dmp

    Filesize

    32KB

  • memory/2116-51-0x00000000003F0000-0x00000000003F8000-memory.dmp

    Filesize

    32KB

  • memory/2116-50-0x00000000003F0000-0x00000000003F5000-memory.dmp

    Filesize

    20KB

  • memory/2116-49-0x00000000003F0000-0x00000000003F5000-memory.dmp

    Filesize

    20KB

  • memory/2116-42-0x0000000001ED0000-0x0000000001EFA000-memory.dmp

    Filesize

    168KB

  • memory/2116-41-0x0000000001EA0000-0x0000000001EB7000-memory.dmp

    Filesize

    92KB

  • memory/2116-40-0x00000000003F0000-0x0000000000400000-memory.dmp

    Filesize

    64KB

  • memory/2116-35-0x00000000003F0000-0x00000000003F4000-memory.dmp

    Filesize

    16KB

  • memory/2116-34-0x00000000003F0000-0x0000000000400000-memory.dmp

    Filesize

    64KB

  • memory/2116-33-0x0000000001ED0000-0x0000000001F1C000-memory.dmp

    Filesize

    304KB

  • memory/2116-32-0x00000000003F0000-0x00000000003F8000-memory.dmp

    Filesize

    32KB

  • memory/2116-31-0x00000000003F0000-0x00000000003FA000-memory.dmp

    Filesize

    40KB

  • memory/2116-30-0x0000000001EA0000-0x0000000001EB1000-memory.dmp

    Filesize

    68KB

  • memory/2116-29-0x0000000001EA0000-0x0000000001EB1000-memory.dmp

    Filesize

    68KB

  • memory/2116-26-0x0000000002FA0000-0x000000000301B000-memory.dmp

    Filesize

    492KB

  • memory/2116-25-0x0000000001ED0000-0x0000000001F0E000-memory.dmp

    Filesize

    248KB

  • memory/2116-24-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

  • memory/2116-77-0x00000000003F0000-0x00000000003FA000-memory.dmp

    Filesize

    40KB

  • memory/2116-76-0x00000000031A0000-0x0000000003227000-memory.dmp

    Filesize

    540KB

  • memory/2116-75-0x0000000002FA0000-0x0000000003094000-memory.dmp

    Filesize

    976KB

  • memory/2116-74-0x0000000002FA0000-0x0000000003094000-memory.dmp

    Filesize

    976KB

  • memory/2116-73-0x0000000001ED0000-0x0000000001F18000-memory.dmp

    Filesize

    288KB

  • memory/2116-72-0x0000000002FA0000-0x000000000301B000-memory.dmp

    Filesize

    492KB

  • memory/2116-91-0x00000000003F0000-0x0000000000400000-memory.dmp

    Filesize

    64KB

  • memory/2116-92-0x00000000031A0000-0x00000000034C8000-memory.dmp

    Filesize

    3.2MB

  • memory/2116-90-0x0000000001ED0000-0x0000000001F1C000-memory.dmp

    Filesize

    304KB

  • memory/2116-89-0x00000000003F0000-0x00000000003FA000-memory.dmp

    Filesize

    40KB

  • memory/2116-88-0x0000000001EA0000-0x0000000001EB1000-memory.dmp

    Filesize

    68KB

  • memory/2116-87-0x0000000001ED0000-0x0000000001F18000-memory.dmp

    Filesize

    288KB

  • memory/2116-86-0x0000000001EA0000-0x0000000001EB4000-memory.dmp

    Filesize

    80KB

  • memory/2116-85-0x0000000001ED0000-0x0000000001F0A000-memory.dmp

    Filesize

    232KB

  • memory/2116-84-0x0000000001ED0000-0x0000000001F0A000-memory.dmp

    Filesize

    232KB

  • memory/2116-83-0x0000000001ED0000-0x0000000001F1C000-memory.dmp

    Filesize

    304KB

  • memory/2116-82-0x00000000003F0000-0x00000000003FB000-memory.dmp

    Filesize

    44KB

  • memory/2116-81-0x00000000003F0000-0x00000000003FF000-memory.dmp

    Filesize

    60KB

  • memory/2116-80-0x0000000001EA0000-0x0000000001EB4000-memory.dmp

    Filesize

    80KB

  • memory/2116-79-0x0000000001EA0000-0x0000000001EB4000-memory.dmp

    Filesize

    80KB

  • memory/2116-78-0x00000000003F0000-0x00000000003FD000-memory.dmp

    Filesize

    52KB

  • memory/2116-93-0x00000000031A0000-0x00000000034C8000-memory.dmp

    Filesize

    3.2MB

  • memory/2116-94-0x00000000031A0000-0x0000000003227000-memory.dmp

    Filesize

    540KB

  • memory/2116-95-0x00000000003F0000-0x00000000003FD000-memory.dmp

    Filesize

    52KB

  • memory/2116-316-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB