Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 14:04
Behavioral task
behavioral1
Sample
63762c5070276bd844b04f3d85e5e966_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63762c5070276bd844b04f3d85e5e966_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
63762c5070276bd844b04f3d85e5e966_JaffaCakes118.pdf
-
Size
85KB
-
MD5
63762c5070276bd844b04f3d85e5e966
-
SHA1
3f3fe84009fdc876b070be033234789047a3ec4d
-
SHA256
2145ce5f4205c393a6b0bcb2f77179e5a73cf7b1129eb6e809e67726e942bf83
-
SHA512
c304549024f71c2937cd39433faf6ec978463367af00c0204cb23b651c411cc3f52a7289b763df2d0ef3027bdc4ec2250095408a7c8f5857db3b9efc340795b7
-
SSDEEP
1536:ufG2WBSBQSRK+Kr7TOKyzBqOQ7MDg1JOEUN5Lu6nMzXWapOnjTNSVAHW8QiaW5lo:LBSBlRhC7T6gME1JCNU6kgnoAuiLH/Gn
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 112 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 112 AcroRd32.exe 112 AcroRd32.exe 112 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63762c5070276bd844b04f3d85e5e966_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:112
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52b132a8fb32cdcc80ba5307c218d674a
SHA1ca44d23d8234b2ca18192f1534c7977a77e6bd82
SHA256b087851c8585418df52a31ead6a63ba0a34475b1d7b935a89bd6a945f94d9aa5
SHA512235d1558ce24355818b57dd266cb17d181c5e09f9c73d287b7342058da929074c60183a6200d5517269e694afbdc8c65fae1a8d9f5dcccd7f8fe9da297c6f2bc