Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 15:15
Behavioral task
behavioral1
Sample
46604e8626cb02a028651750d4daf6b1_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46604e8626cb02a028651750d4daf6b1_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
46604e8626cb02a028651750d4daf6b1_JaffaCakes118.pdf
-
Size
89KB
-
MD5
46604e8626cb02a028651750d4daf6b1
-
SHA1
1c2aaeb694ce5460143b97750cbd2c017cf00bec
-
SHA256
d96eb27008b93269d2024a05992b5daab1e485c3ac3acb1a84070725f693d8d5
-
SHA512
a2ebc6f88facce5ea2092939208ac260c62ecbaa12af2b253945238e56e21d3f0ffd62e204b560fa50660d4be485c97be5f36e592014c69513ccffd329b86570
-
SSDEEP
1536:Vso/KLC3J0ljxnM8WkowutUDYZWRqXxGI/OefaWmSgV3PMaRWcpOm0LZ:awd3J0J1CkowutUUZWRqQef0SCMaomO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1488 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1488 AcroRd32.exe 1488 AcroRd32.exe 1488 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\46604e8626cb02a028651750d4daf6b1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1488
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c975deabb8c99b26d5630aeab70f4b65
SHA1221187f2fb315e2e6547c51db1d79a99ed652d77
SHA256c08bfc1e01457d4791782dcad21d88a417c3ed89a7183862cc1b4f064889f6c6
SHA5121ce55fd149a0251350063b5af42d2d7a22ed81daaba40723bf125ff26c5c8ccd528198a4d60c1848d4d6d1eaf7cb09c1989235ab9eec378fd9b0e801455dd482