Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 01:36

General

  • Target

    59ef78595afd100aaba38b68725de5e4_JaffaCakes118.exe

  • Size

    1.0MB

  • MD5

    59ef78595afd100aaba38b68725de5e4

  • SHA1

    7944c9695f281997402892720cd37509eec60496

  • SHA256

    629a5b315e96d9399f9f9a7c999581029c4d52ea1ca3d7194dd5555f831602b8

  • SHA512

    6c1194a3af5ac0e7d689d62a0d57e4f88d69269729370f992d51e1fc5666adb59286620d03ab6a0b4f9b1614154956845afbf28962968e8db3a730fb20b5c3df

  • SSDEEP

    24576:bDyxAU/oieoRpNkWeIejsYbA6Q3mGLj99iQLGFS1IX3tjL:8AUZrN8IScWWPGFLntv

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\59ef78595afd100aaba38b68725de5e4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\59ef78595afd100aaba38b68725de5e4_JaffaCakes118.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/824-0-0x00000000008D0000-0x0000000000A51000-memory.dmp

    Filesize

    1.5MB

  • memory/824-150-0x0000000077CA0000-0x0000000077CB0000-memory.dmp

    Filesize

    64KB

  • memory/824-126-0x0000000001000000-0x0000000001105000-memory.dmp

    Filesize

    1.0MB

  • memory/824-2-0x0000000075DC0000-0x0000000075E07000-memory.dmp

    Filesize

    284KB

  • memory/824-910-0x00000000008D0000-0x0000000000A51000-memory.dmp

    Filesize

    1.5MB

  • memory/824-911-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-913-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-914-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-916-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-930-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-940-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-948-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-960-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-972-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-918-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-970-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-968-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-966-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-964-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-962-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-958-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-956-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-954-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-952-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-950-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-946-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-944-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-942-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-938-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-936-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-934-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-932-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-928-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-926-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-924-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-922-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-920-0x0000000000A60000-0x0000000000B61000-memory.dmp

    Filesize

    1.0MB

  • memory/824-3892-0x0000000077CA0000-0x0000000077CB0000-memory.dmp

    Filesize

    64KB

  • memory/824-3893-0x00000000008D0000-0x0000000000A51000-memory.dmp

    Filesize

    1.5MB