Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10/08/2024, 15:53

General

  • Target

    86b183234cbe09b3d75c381036cd8a0a_JaffaCakes118.exe

  • Size

    600KB

  • MD5

    86b183234cbe09b3d75c381036cd8a0a

  • SHA1

    848fc40570bb3405a98b3016f8b95f6caeb29039

  • SHA256

    c1e6a4378924352861a06fd287111dc4da04a6321287822a1e26c5ec73fd9bc6

  • SHA512

    1ecdf0c012977f3e0fd61360f02abdbd65a5ee78569cc19f026763c2b5c12aedfd3bed4a69882df43284977b45ddbd8462b1591ec83225d6c30a0f4886df0470

  • SSDEEP

    12288:5yek+4/PnuVjsYB6BPws2B7W5ofdshAzq6pd1OqedqyD15C:0qsYB6BIfdWOfdsuWCLxe9E

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\86b183234cbe09b3d75c381036cd8a0a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\86b183234cbe09b3d75c381036cd8a0a_JaffaCakes118.exe"
    1⤵
      PID:2480

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2480-0-0x0000000000400000-0x000000000075DC23-memory.dmp

      Filesize

      3.4MB