Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15/07/2024, 14:47
General
-
Target
4a20c45eff97f29cb103ee71b02c69f9_JaffaCakes118.exe
-
Size
143KB
-
MD5
4a20c45eff97f29cb103ee71b02c69f9
-
SHA1
7929921575b6083a72b68fa69907494392c18a31
-
SHA256
2538028c3e67fcb6c484c5e5528516d666aeb6a4eaf50939e8ea60a26a1d11b4
-
SHA512
876035705f75159891b8386f4126b8fd9f25ccfd2a659e403d3f0166506e43e5c36edc41605487dfb16433d9cd46347d785e0c6c211f214c3ca2cfe7f6a7fc70
-
SSDEEP
3072:dPT7nvp5EaYhZ95ul9UGj0dXFowR3+GZXQ4/LqlIxkML3EZjMSq0Xn:dPvnvp5p6Zel9UGjc1ocZA4/Lq6kdl
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\4a20c45eff97f29cb103ee71b02c69f9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4a20c45eff97f29cb103ee71b02c69f9_JaffaCakes118.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
360KB
-
Filesize
116KB
-
Filesize
140KB
-
Filesize
116KB