Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    18/08/2024, 09:03 UTC

General

  • Target

    a62c541e2350e56df8eb925cb0cfc238_JaffaCakes118.dll

  • Size

    93KB

  • MD5

    a62c541e2350e56df8eb925cb0cfc238

  • SHA1

    1b2dbcb6b25ed18c730efdf7936b8497576af0f8

  • SHA256

    b6a416cdc0302ea463be46bbd608d63e01bcfd0b0e4c58b645c316a9ad76c884

  • SHA512

    b3d6ce21e57aa9effd7e7d1c694160fe617f076167793c148d5f70c28d67b9d38c8280fb56dcd72718f5f856c7ef29e7326bcca4a41ed6829d333ea4949a1048

  • SSDEEP

    1536:Cx3/K2rb4l/8V3rQIr7/lrRYygg6BJlepZbvu+Ea79Hq7dpsSkoZ9m:03/KeW8V3rQs/ld6g6GbGa7E7vVlZ9m

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\a62c541e2350e56df8eb925cb0cfc238_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2752
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\a62c541e2350e56df8eb925cb0cfc238_JaffaCakes118.dll,#1
      2⤵
      • System Location Discovery: System Language Discovery
      PID:2336

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2336-0-0x0000000010000000-0x000000001000E000-memory.dmp

    Filesize

    56KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.