Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15/07/2024, 09:19
General
-
Target
492c24638c2408b5b9bf72fec063d994_JaffaCakes118.exe
-
Size
440KB
-
MD5
492c24638c2408b5b9bf72fec063d994
-
SHA1
df744a3d0619bc4bb4bc04a513967c84f3fa16a2
-
SHA256
2d6fd979c4d6ebc5ea67ffcf9a73ab1abefb0cd4253ffda3044eb93b86700b13
-
SHA512
cd50d73aa7ee486e0e8eba6cb3f57274351383e80ead35c88bf56c0cd9ad756ca3d27db515cede0d43b250d635f820045231733c436a5ceba9301b4c48c09c7e
-
SSDEEP
3072:PyljdM2StBWVAVda8l4Y4sibt50zr8l4rxzDFnREoKoo2H/+CrTli75wtfU2:LI8OPI8oxxREodRH/ZoAU
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\492c24638c2408b5b9bf72fec063d994_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\492c24638c2408b5b9bf72fec063d994_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx