Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

60778a6002...18.exe

windows7-x64

1

60778a6002...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 23:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    60778a600284f78750cfab5c09cbf178_JaffaCakes118.exe

  • Size

    480KB

  • MD5

    60778a600284f78750cfab5c09cbf178

  • SHA1

    d10d5f853854244a7a3b64dd25b39cf474e10123

  • SHA256

    821d693c2d5f7480bb950e1de296eb2073d2ae6721c86f1fbd0e3cc38c1fcc25

  • SHA512

    039c38e61dc5fc6f15f7e84e16da4f24b1cc13dd26b492362e1800b6cee326fa82df222ea05089371bdaa50396b7c26d55b825b0e69323ff6ab9849326dcf802

  • SSDEEP

    12288:/9wApN8WGzHQorn5LmNewcr/HYUhNF8JsWYJqc1zUMh:1w2N8W8HQoT5Lmncz4oNF8J9Wz1r

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\60778a600284f78750cfab5c09cbf178_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\60778a600284f78750cfab5c09cbf178_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1708-0-0x0000000000400000-0x0000000000663000-memory.dmp

    Filesize

    2.4MB

    Download

  • memory/1708-1-0x0000000000250000-0x0000000000252000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1708-3-0x0000000000400000-0x0000000000663000-memory.dmp

    Filesize

    2.4MB

    Download