Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 15:41

General

  • Target

    4a50439bce6cdcc5d9bd1d36beb01f5d_JaffaCakes118.exe

  • Size

    222KB

  • MD5

    4a50439bce6cdcc5d9bd1d36beb01f5d

  • SHA1

    393d43ef34e2abfa661a07a57b50c9d350ad410c

  • SHA256

    4090a4733fead6ac840a24c268a52f77c28827099630598555372c1bd8415b1e

  • SHA512

    485e97cf5f2ed5c5b1b52a9fec67344aeb111f4ffc1db642eacb2edee70fdcdc4035fcb702227358734fb24ed47687b621e8c7a54a62b2a6d07d32af5e30978c

  • SSDEEP

    3072:vEpNcvKPOmgZnyTynxsWQUTs6JbPsGwHNxb0egGKz4jM1QDmY6r2b9I/ipjL+5:vmSvKPEnSjB6JeNfgGvMSn3RLG

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a50439bce6cdcc5d9bd1d36beb01f5d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4a50439bce6cdcc5d9bd1d36beb01f5d_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2012-0-0x0000000000400000-0x000000000049D000-memory.dmp

    Filesize

    628KB

  • memory/2012-1-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2012-2-0x0000000000400000-0x000000000049D000-memory.dmp

    Filesize

    628KB

  • memory/2012-4-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB