Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23/07/2024, 11:19
Static task
static1
Behavioral task
behavioral1
Sample
675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe
-
Size
790KB
-
MD5
675ee23b1db9e71238a5d2a1e9586099
-
SHA1
68805e1adea47d8b760404cbe0fe7c5c2c30dc90
-
SHA256
45cb81f1dcbd8d0874e43048479bc3bf133855984a569746ff42bae0904eb1ed
-
SHA512
a34c196405af233480fd550afc82d5b591653259013139d0a9783ddf77c0f718eb8d1893ce8c2878012fdea903fc8db6aa7342d780eeaaec24eed6bd8f54e41d
-
SSDEEP
12288:u8CDEETriahXaZpFBl/k0rSp0qihCNL02fQJeKQslyVplwAFIGX805QHO7HknIfs:ufxCiXa/7pg09z2fQJ6LRwAFIG3GSds
Malware Config
Signatures
-
Loads dropped DLL 5 IoCs
pid Process 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe -
resource yara_rule behavioral2/files/0x000900000002344f-5.dat upx behavioral2/memory/2424-8-0x0000000010000000-0x0000000010137000-memory.dmp upx behavioral2/memory/2424-9-0x0000000010000000-0x0000000010137000-memory.dmp upx behavioral2/files/0x00070000000234ae-12.dat upx behavioral2/memory/2424-17-0x0000000002340000-0x0000000002398000-memory.dmp upx behavioral2/memory/2424-26-0x0000000002790000-0x00000000027DE000-memory.dmp upx behavioral2/files/0x00070000000234af-23.dat upx behavioral2/memory/2424-18-0x0000000002340000-0x0000000002398000-memory.dmp upx behavioral2/memory/2424-27-0x0000000002790000-0x00000000027DE000-memory.dmp upx behavioral2/memory/2424-90-0x0000000002790000-0x00000000027DE000-memory.dmp upx behavioral2/memory/2424-89-0x0000000002340000-0x0000000002398000-memory.dmp upx behavioral2/memory/2424-88-0x0000000010000000-0x0000000010137000-memory.dmp upx behavioral2/memory/2424-109-0x0000000010000000-0x0000000010137000-memory.dmp upx behavioral2/memory/2424-133-0x0000000010000000-0x0000000010137000-memory.dmp upx -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe 2424 675ee23b1db9e71238a5d2a1e9586099_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD573f40d693f249f173f6a3a5cfd08ad8f
SHA165ce365b81c207dc78fb5523d89d7861bc41ad9b
SHA25657f518c11e8d3017c67487176438cebc12be06a8eafaf1849501de208521311e
SHA512307f7ac8ddfe56795588572b3b1db188515975f0e3afe6eada789199e6c3b7f83e301df8f6dfff03cf44b2bb6181cfd3e2ebb0a16050639303a2cb25233037f5
-
Filesize
2KB
MD5274055fd91557d4e76e12e4298e8878d
SHA125b0ff1a6ad657ebee55a1cbfae3adce66650b4e
SHA2564023a52728143911d5e00ab64ab455e558963326c67ed9fc44f58be80fe41dbd
SHA512c4250ce995b65ec5fbeb39a6db97775063af9d9399df7d0c795d2a7a954fe61a2be99e570c2b50abdefb3c31cf0043938583f13d4db37b17720adb277e416518
-
Filesize
2KB
MD5d99a69ced7114834ae65e0eebc528eb5
SHA19a3e62cc14b7defdbaea2a86cd4b4ed8a5343f0b
SHA2560982d951f9fdfc282741c4a241248e5e1f8eb255136257a87b4042dc9934cf6c
SHA512f7296013b15172d0778e64f2a2abe10232a7803e53439106190f9b709ceaa91d4c71f2399f86bfdc697ed952f34de039473f21b1df0934bff5233985e7ee3c1b