Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 10:43

General

  • Target

    5b99476f436b34705a650eff2962bcfd_JaffaCakes118.exe

  • Size

    240KB

  • MD5

    5b99476f436b34705a650eff2962bcfd

  • SHA1

    e804b16f023b12e7f988006b3c4aae5c52992eed

  • SHA256

    9bd74e0c23f28ccfa4e05b9a0dcf7a6e15f44a978211c69efeb4c29bb0d00848

  • SHA512

    ba86b5554c32f5c20611479b00ad7ccb515cee7ba8e05914115957646394255ad8efc649d7c1344545a8014171d5395f85e25b01588bb42079d2b4c88920ce7d

  • SSDEEP

    6144:kQU7J/8YUaJEtUEuBTvH898LM9mkgmUe5HqWLd1zh6FSA:kQU7J/8YUHUEuBTv28LM993dd1FhA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:1196
      • C:\Users\Admin\AppData\Local\Temp\5b99476f436b34705a650eff2962bcfd_JaffaCakes118.exe
        "C:\Users\Admin\AppData\Local\Temp\5b99476f436b34705a650eff2962bcfd_JaffaCakes118.exe"
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:2376

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1196-7-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

      Filesize

      28KB

    • memory/1196-11-0x000000007EFD0000-0x000000007EFD1000-memory.dmp

      Filesize

      4KB

    • memory/2376-4-0x0000000076571000-0x0000000076572000-memory.dmp

      Filesize

      4KB

    • memory/2376-3-0x0000000077140000-0x0000000077141000-memory.dmp

      Filesize

      4KB

    • memory/2376-2-0x0000000001E00000-0x0000000001E10000-memory.dmp

      Filesize

      64KB

    • memory/2376-1-0x0000000000300000-0x000000000034D000-memory.dmp

      Filesize

      308KB

    • memory/2376-0-0x0000000000230000-0x0000000000231000-memory.dmp

      Filesize

      4KB

    • memory/2376-5-0x0000000076560000-0x0000000076670000-memory.dmp

      Filesize

      1.1MB

    • memory/2376-6-0x0000000000400000-0x0000000000413000-memory.dmp

      Filesize

      76KB

    • memory/2376-10-0x0000000000400000-0x0000000000413000-memory.dmp

      Filesize

      76KB

    • memory/2376-21-0x0000000076560000-0x0000000076670000-memory.dmp

      Filesize

      1.1MB

    • memory/2376-22-0x0000000000300000-0x000000000034D000-memory.dmp

      Filesize

      308KB