Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 08:12

General

  • Target

    40e0dfef6dd14a233625f3b7646a4b53_JaffaCakes118.exe

  • Size

    107KB

  • MD5

    40e0dfef6dd14a233625f3b7646a4b53

  • SHA1

    327d2ff5261015a78ab5aca8e3e3ac79a4727333

  • SHA256

    cb343216660578b91a568251d1a5b9fc64d1dd7b5ae8bb70fab8b6ffb7e0d2e3

  • SHA512

    fb8c30d5f4174a4485737d378083d96eb460e4d822382e5db16dfca5b71cb7fa4d6517f513d1d2d1e9929e7890db557d2a3dc9319fde499de8e6544cea3aa17e

  • SSDEEP

    1536:71XLm/c7JUwJHgzheYBv7xVOBq//fr2ORe345GgnB3oWWC7Jrwe7JO1Ke+LbBR9W:71m/cNvqBjxVCq3fr2OReg18j0e+0l1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\40e0dfef6dd14a233625f3b7646a4b53_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\40e0dfef6dd14a233625f3b7646a4b53_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2296-0-0x0000000000400000-0x000000000041D000-memory.dmp

    Filesize

    116KB

  • memory/2296-1-0x0000000000400000-0x000000000041D000-memory.dmp

    Filesize

    116KB