Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 03:22 UTC

General

  • Target

    5a44e9d9a4047d61520b19add0f90e40_JaffaCakes118.exe

  • Size

    372KB

  • MD5

    5a44e9d9a4047d61520b19add0f90e40

  • SHA1

    0e56cfb1eac7c49f88896a3a6439791592f3c0a9

  • SHA256

    60271fe97d24e9c2d1782236bb808ea22ac53b9294492f558a2b7ffd63e9c0be

  • SHA512

    49f4e75bdd5102e85caabdc73ab034113b0bce6182dfa38f4f3a00df24ecb81af1cbf7685fce42b94c36ff658db777ba784e688524b6c64b7715cf43750f45a6

  • SSDEEP

    6144:P30a1ndMhZrLVIRNpIZvrHxZe1SdCpxEuV+mTWS2dp9s+xr8Aoy+1WTJA22iZY:Pz1dMhAfevBsTBO9VxYFy//2MY

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5a44e9d9a4047d61520b19add0f90e40_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5a44e9d9a4047d61520b19add0f90e40_JaffaCakes118.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/760-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/760-1-0x0000000000400000-0x0000000000534000-memory.dmp

    Filesize

    1.2MB

  • memory/760-3-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.