Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

ce9148154f...18.exe

windows7-x64

7

ce9148154f...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 03:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ce9148154fcec18fccc0ca50d5b61bf0_JaffaCakes118.exe

  • Size

    44KB

  • MD5

    ce9148154fcec18fccc0ca50d5b61bf0

  • SHA1

    8a2e40fde8fc96a6916b29a14882a76529260f9b

  • SHA256

    927aab22209d8d14111426517796640e33dab047f8e6f9e9ba6e39e39b68f226

  • SHA512

    6185225d7001b711af99383c45f4b3b4d1431c36f3748a61ff417e1ac9ff52339c09648a811222172e75fec224258f8630d73eb502aba2b0545acff7162a650b

  • SSDEEP

    768:DOOjkbzPCmxYtBrVLpRQuMdsOCxIGLgRqmt0rRyvwbRoZ7uPtsNOsrSns:mfCn/RpEJCxNk+c4bRoZ7u1sNOoB

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ce9148154fcec18fccc0ca50d5b61bf0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ce9148154fcec18fccc0ca50d5b61bf0_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Program Files\Common Files\Microsoft Shared\MSInfo\SysInfo.wmp
    Filesize

    26KB

    MD5

    544e14087d67c35f9a249bbd0ae21d1e

    SHA1

    5b10a16ac773d4bd93f99bfec936b4354f19b042

    SHA256

    e31ffaa5df7ef171b56666549fbf852ece92cd9fca221cb1ab1ab213077d5363

    SHA512

    5af0982dc54f3ed0fcbe5575ce9c8e20be4e7743b7fe93209dabed3901c9d9dad785d7566b8cf5b99146bb158731f66e02887ec1354ba92359580b5273f111df

    Download Submit

  • memory/2216-0-0x0000000000400000-0x0000000000465000-memory.dmp

    Filesize

    404KB

    Download

  • memory/2216-4-0x00000000002C0000-0x0000000000305000-memory.dmp

    Filesize

    276KB

    Download

  • memory/2216-5-0x0000000000400000-0x0000000000465000-memory.dmp

    Filesize

    404KB

    Download

  • memory/2216-6-0x00000000002C0000-0x0000000000305000-memory.dmp

    Filesize

    276KB

    Download