Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 00:20
Behavioral task
behavioral1
Sample
43c87394ca169f17eee138995bbf3d88_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
43c87394ca169f17eee138995bbf3d88_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
43c87394ca169f17eee138995bbf3d88_JaffaCakes118.exe
-
Size
4.3MB
-
MD5
43c87394ca169f17eee138995bbf3d88
-
SHA1
db4a50b1808bc959cff434e9017d89be1353cfe0
-
SHA256
b6218048f1725f7be315c9c7eaec14a3a727c7f9d036ba5e82adaf5e3b7568ee
-
SHA512
bff59cbd0483b7fe72c2037b48862706243ea92858abc76e0deb7130e1593148b1db34bf1d018bfecea392882a05f6b67509007b943662f2ebc9d151e05b8189
-
SSDEEP
98304:8q45xWyYbpxQ32rpQPuq0DnhbTHNUvS/iP:8nxDY7QGFQPuTmCK
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2204-0-0x0000000000400000-0x0000000000FB9000-memory.dmp upx behavioral1/memory/2204-1-0x0000000000400000-0x0000000000FB9000-memory.dmp upx behavioral1/memory/2204-2-0x0000000000400000-0x0000000000FB9000-memory.dmp upx behavioral1/memory/2204-3-0x0000000000400000-0x0000000000FB9000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2204 43c87394ca169f17eee138995bbf3d88_JaffaCakes118.exe