Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/10/2024, 02:35

General

  • Target

    04101d26f66021b00bf9f293e2e42514_JaffaCakes118.exe

  • Size

    590KB

  • MD5

    04101d26f66021b00bf9f293e2e42514

  • SHA1

    4fd7a52053e0b938804411512a56dbe455d7db26

  • SHA256

    233a00122745dc79a96ea6a69f2cb9d4353ef279f5865eb1d83c7a63958e7b09

  • SHA512

    deb6c8682a164806ba8e82764adbad616aa8c04ed89436dc535f88136c1e86d12a95c7400995ee7b48d74c03d0946aee9490f6429ff314409efc0ea15a2c2e15

  • SSDEEP

    12288:6Fvpgq2bvxJSN47FLzvlgbXcjKVoZToq0dGLbe5rQEFAdin7zf9AZSKZX/:ovm5lJSwlzdgbMjnJojgdinP9AZz1

Score
5/10

Malware Config

Signatures

  • UPX packed file 9 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\04101d26f66021b00bf9f293e2e42514_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\04101d26f66021b00bf9f293e2e42514_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2660
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4056,i,12198811467968044966,17227406646827438786,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
    1⤵
      PID:2064

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\bootstrap_26208.html

      Filesize

      156B

      MD5

      1ea9e5b417811379e874ad4870d5c51a

      SHA1

      a4bd01f828454f3619a815dbe5423b181ec4051c

      SHA256

      f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a

      SHA512

      965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\css\main.css

      Filesize

      9KB

      MD5

      939b5f010bd0c58e794812904ed66d0d

      SHA1

      1b1e92d2e4a218bad96237f6d603bd9c496d12da

      SHA256

      55c6b6297c3c20df0e1f61c6d3cb2796e5cdc3b932e1a573ad8b84bc2a9486f2

      SHA512

      119aa128663dacf2c5e3c303e7e1a6f3e537cebc0ea9bb5b31b78b442b7ec6ff545dbfa743cbccf9914bb96932b8943902fadb5a4cc60e5b76a584c59229c1ca

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\css\sdk-ui\progress-bar.css

      Filesize

      506B

      MD5

      5335f1c12201b5f7cf5f8b4f5692e3d1

      SHA1

      13807a10369f7ff9ab3f9aba18135bccb98bec2d

      SHA256

      974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda

      SHA512

      0d4e54d2ffe96ccf548097f7812e3608537b4dae9687816983fddfb73223c196159cc6a39fcdc000784c79b2ced878efbc7a5b5f6e057973bf25b128124510df

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\BG.png

      Filesize

      6KB

      MD5

      65ad220cd1cbf9e43daaf70bc9920396

      SHA1

      270ad46b64298c47e2fc51d5218eac1aa2e24b25

      SHA256

      d3f744f95f1ee1f79e6d720ea003b07db200ae9ab0bbcc0a8b792d8c01270b1a

      SHA512

      2a6ed629f12827513605a916e8e6e32fbdb02c78aed467f1a42f834b46cb5516075d641ca2e31e845bab98f2e41c59b032b81ba79ce43f3ec20fdd012ac7ea41

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Close.png

      Filesize

      293B

      MD5

      75a9464e6e2e2d8efc82e5285ab0d95d

      SHA1

      03aa7ccf18666265cef894adc30aede977116405

      SHA256

      7ec62b84d0c741b8e1f4c735ba37fd4dc889690590cf900073793b8d6e44cd0a

      SHA512

      c52d190454e7d6fbafdd18960b5c95cc76da66ce02b7d0caf1eecc3335ae60b8aeb8b014be9adfaf46cafcdb7342029ec265d64576483cfc2b2439a514d9b63c

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Color_Button.png

      Filesize

      846B

      MD5

      f6a0a0c082bc7ddc1e0e599493949e1f

      SHA1

      73b63bb6233e0e27b58ccdcb4ac32b05e36ce046

      SHA256

      b01fb9069f905b1f8ec3b72937e1a7a415fa62ee289aa79c68f65eee43bdd762

      SHA512

      ed5176bb258835a6346322a0ec0564557da28484a7bcc014ad1fcc337b14518b98e37475e41e6ae29cb724333e1c8471dd0f48bcf2a0d4cff522fb15e097716b

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Grey_Button.png

      Filesize

      1KB

      MD5

      cf9f300c3fd712ca05bfc20f7c758d44

      SHA1

      9381f2929a81e4bda1651d1680c3bdde6a8c999c

      SHA256

      f65de10d313c6b1f74d867b3d7b0a6a1516db5b398b92af5c3b8bfae3169fb2b

      SHA512

      9607b08bb414b241ff8cf6b65ebfa389ed6390523f20f98882babc21b339bf3242ae79ad397313b7709f7a8d4d3a1036a40296f495509651ecce1747577c0977

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Loader.gif

      Filesize

      10KB

      MD5

      57ca1a2085d82f0574e3ef740b9a5ead

      SHA1

      2974f4bf37231205a256f2648189a461e74869c0

      SHA256

      476a7b1085cc64de1c0eb74a6776fa8385d57eb18774f199df83fc4d7bbcc24e

      SHA512

      2d50b9095d06ffd15eeeccf0eb438026ca8d09ba57141fed87a60edd2384e2139320fb5539144a2f16de885c49b0919a93690974f32b73654debca01d9d7d55c

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Minimize.png

      Filesize

      925B

      MD5

      62f63f099f309c5dfc9945fdcb72cd0e

      SHA1

      d95a6a2bd5a8351acc7128b0e0c624eb0f160311

      SHA256

      a68fdae5fd1cb8ce44e2a71473245867a5089b4a9842fd500973f10e11570ac9

      SHA512

      fcff94f3543e9eb28055042cee73236b9ef9d35518f2d97995e90c1c313c0972da9e8bd949ee8a60bd44472ce453824df5d47c893b0ffb34b82b0854bbaa7ef1

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Pause_Button.png

      Filesize

      577B

      MD5

      84b37cb510f50c8fea812eb308d3f03f

      SHA1

      d141a79feb407506709f051e55c55438a12fd3b4

      SHA256

      7bf800336671204de36b7d1f6ceffdff830040f51d21bc44f220f68d72cf492b

      SHA512

      3222cb5772a4e9b20de253914c0856c7e6383567df68fcf287801f6f79248f65957515e7ec4a44db1fbe910afeae8ca3349295c4bdf03df6aabde36f2aaa6b5e

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Progress.png

      Filesize

      104B

      MD5

      35a600a752d3074501de31a516860499

      SHA1

      51eac62cf77a0b88a3e9cb9ee6f85def21fd4bcf

      SHA256

      14e064857751b23da7bbe40861ef4caf99b2496227507b8e3108fbac6d901f75

      SHA512

      046ec179571d239bfb2d51be9837f96d9afebf2e5db77bba0f4a25ce8716d37581a3f9753bd2dbb04c47711699a9d93987bceb71df0b8becf8c577d660320069

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\ProgressBar.png

      Filesize

      812B

      MD5

      eabb61abba55f80af418fa1128d1548d

      SHA1

      a5ee1d55de2cc60966039120c830fc19cefb0351

      SHA256

      717f3f02f5d5fd1478b6d2ec44acef6e70bb8f1adcf2dc030c08b92e851737e1

      SHA512

      d232072c9540bf0e2fd56f353c2cc83518eabf8282cc02d9f8bec81c0341287ada29ba79f2a515d68722658686b6cce97be138a48f44409562d9a567af200bd6

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Quick_Specs.png

      Filesize

      221B

      MD5

      07cd59b954e8495ad6cd6a7c11d2de86

      SHA1

      787aeda3eee8053705fb208a6b399b8340820b82

      SHA256

      6e6b964fd79b4a3461f128e2ed145b9b641d108b8616695f36387661cae995bb

      SHA512

      0159aca0c2a49393fd91acd4b6819217e67f8fd01e220297eb3e0fdd8132fad794fc317f5cc5e2b761d4123da71478b97df776908de6740eb6d54187c6c00754

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\Resume_Button.png

      Filesize

      718B

      MD5

      9d31583bcfad58a6b9ddeaf44549a5e6

      SHA1

      98f4c693af708e02201de2aee31fe094dc3b0a9c

      SHA256

      e466a2db2f755d9eb68619439af37ff4e45559b7a3f476e226ab2a11aeadae1a

      SHA512

      9ddaaad53375f4d2874fe5c98b6782202d2bd975cdd9363796986dc7567368b94d9ec1aa3e839194097838b787bbd71d574540cf5b04fd04f10fa80d6a89e695

    • C:\Users\Admin\AppData\Local\Temp\ish240673156\images\sponsored.png

      Filesize

      2KB

      MD5

      e3758d529f93fee4807f5ea95fbc1a6c

      SHA1

      3a9a1ba234e613e5f808c3ffeda05a10a5dafe00

      SHA256

      8d46eb0c60043dcb7d79ab3d0525148fc901764620c02e4b9c5dd8b0e9026303

      SHA512

      e891552bee3aa10247cad1fcc510331077016a6e71d46827be2dd46017f943c5acc2c1506b41217880d35d52a94989923ad0a345f8791da4bb379eceefe3c407

    • memory/2660-145-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB

    • memory/2660-146-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB

    • memory/2660-149-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB

    • memory/2660-1-0x0000000000400000-0x0000000000414000-memory.dmp

      Filesize

      80KB

    • memory/2660-6-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB

    • memory/2660-5-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB

    • memory/2660-2-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB

    • memory/2660-147-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB

    • memory/2660-148-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB

    • memory/2660-0-0x0000000000401000-0x000000000040B000-memory.dmp

      Filesize

      40KB

    • memory/2660-189-0x00000000022F0000-0x0000000002423000-memory.dmp

      Filesize

      1.2MB