Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 09:01
Static task
static1
Behavioral task
behavioral1
Sample
629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe
-
Size
24KB
-
MD5
629c6cd2eb44c471541e3dca274e3c8f
-
SHA1
81f0583318407e717436df078b01200a32020f02
-
SHA256
c5cbbccef9fe50cdf25eb5da48da9a37a00f929b5c91786ecd6da2dc805b7cbf
-
SHA512
371dbaba5224ceacc1a28ec8798458aa29d2587472ad3ecac2d475c7fa1451d9c7542bea39afc2dd37aba654525389a00dd7b2d501dd2b5905374d2c6184790c
-
SSDEEP
192:3bYWsJk+KxAGublyE7PeS1wjEQLlHGf5ahf1F69ypnAZqouJ2/5hUNhM:3OJhtGeLPn0tLl9F6sngqL2/5hCM
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1832 629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1832 wrote to memory of 2232 1832 629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe 30 PID 1832 wrote to memory of 2232 1832 629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe 30 PID 1832 wrote to memory of 2232 1832 629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe 30 PID 1832 wrote to memory of 2232 1832 629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe 30
Processes
-
C:\Users\Admin\AppData\Local\Temp\629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1832 -
C:\Windows\SysWOW64\cmd.execmd.exe /c copy "C:\Users\Admin\AppData\Local\Temp\629c6cd2eb44c471541e3dca274e3c8f_JaffaCakes118.exe" "C:\Users\Admin\AppData\Local\Temp\file.rst"2⤵PID:2232
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD5629c6cd2eb44c471541e3dca274e3c8f
SHA181f0583318407e717436df078b01200a32020f02
SHA256c5cbbccef9fe50cdf25eb5da48da9a37a00f929b5c91786ecd6da2dc805b7cbf
SHA512371dbaba5224ceacc1a28ec8798458aa29d2587472ad3ecac2d475c7fa1451d9c7542bea39afc2dd37aba654525389a00dd7b2d501dd2b5905374d2c6184790c