Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
19/07/2024, 18:49
General
-
Target
5d38288b37d4010b95695902b52f969a_JaffaCakes118.exe
-
Size
416KB
-
MD5
5d38288b37d4010b95695902b52f969a
-
SHA1
668624a2cde83e51e0f7f6920a29b759e971de0b
-
SHA256
adfc8c4cb2ea69bfeb954b39cf24c158d1e592f12e068e07f37bb8b6711404b1
-
SHA512
24c316629ce3039886adc0eab6e2596d6d5246f2001b8f2a9e1b38629ace01ab2632605bfaeae20d745a4f02e160fe4923e699f804306a25e1ebf314c15490e0
-
SSDEEP
12288:0wG0892m8wTQTLdYQegKOcOj7E/eGfGcxGeycVe/Rk1DRE8bmVKua95Cen1QrWx2:D/DaVUQHuK+qf
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Drops file in Windows directory 2 IoCs
-
Modifies Internet Explorer settings 1 TTPs 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d38288b37d4010b95695902b52f969a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5d38288b37d4010b95695902b52f969a_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of UnmapMainImage
-
C:\Windows\system32\taskeng.exetaskeng.exe {909D1BB8-3B03-4C3C-986C-CCD80979F806} S-1-5-21-1506706701-1246725540-2219210854-1000:MUYDDIIS\Admin:Interactive:[1]1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5d38288b37d4010b95695902b52f969a_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\5d38288b37d4010b95695902b52f969a_JaffaCakes118.exe2⤵
- Adds Run key to start application
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
372B
MD5f6b511f5c3b41e6ef03bc24a1858d9e5
SHA17f41c07c048106e7ee60089541b8a88ce4f09b5a
SHA25672e85d00d1c0b208c68d37f45ed5473aeabd96bacf56bd7b2fdb8be3448e090f
SHA51217235ad6bf6d97a8d18900bea0490985510621f0938a3f02bb0943f0a7f223177531f4283207a3ba764cee11fe52c3ecdf9f905b4a7d6096923d399d84ba0424
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
4KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
236KB
-
Filesize
236KB
-
Filesize
420KB
-
Filesize
236KB
-
Filesize
420KB
-
Filesize
420KB
-
Filesize
420KB