Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
03/10/2024, 23:50
General
-
Target
10f8fb075321e9e4b6e359ca4dd22431_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
10f8fb075321e9e4b6e359ca4dd22431
-
SHA1
f90c422142d9d05e44bf42bd971c93396e2ef4e0
-
SHA256
79b118ae98da7745af46b64d1ada2e5aca2ac201b56b801fae5c6b01a6fd3c3e
-
SHA512
b788f59e425af9f7438df203e3dc057875d3b68b47ae48034f3c23d22955f383c38976b15f03e38f3f979776c0aafc0a3214653121f1c8bf9205bcc643fb08ae
-
SSDEEP
24576:PCPWKfD7Pz04I2QLbzjuXxpSzRMRPCTokLRRNyuJv:m5nz0BbzK+dlUWIO
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 24 IoCs
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\10f8fb075321e9e4b6e359ca4dd22431_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\10f8fb075321e9e4b6e359ca4dd22431_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
79KB
MD5e388b183baeadc91cb899bda5f220958
SHA1df9e493fc522cc518851f43a4aa979906f8daa20
SHA25670e3e0779b8abcefbd5ef9c5d171313b58a342d5ecf74d5d941ae104a2ad0c31
SHA5125ab25e3ecdc7110b55e9aa0d0b70c0a793d0911f170313784705a9a307ed8c40277a9aa0219b9a2879c00f5982f46b55edbebaeae9a8f3d8d0ee76508baf49ac
-
Filesize
2KB
MD551cf0ca782b2347e7ed67f79ee66002f
SHA1f9974866cf3fe22ef59e264ec1f01d669b6049a8
SHA2564599f0d57ce98eeb4de231348fdc9e6c61af7783d35a2deb37e481a0839dd5d4
SHA5127e8d89990373a1565a515fb6e8ff9bf1bcb235d82eb78a50c6f264fb4f8e476bb74c9af2250aa586d0d5d6c3700ff5d3db573b6ff000667cd4e49d2ca8ddd15c
-
Filesize
57B
MD54a6186f9eb9c930bb46f1038a073a451
SHA1570471c1b1d5ac0bedc02e467208de6f99a892d3
SHA256382f571efb24d7be12785ffe83a85144d73f1a56439f2ffd4c48eb8d246b7e27
SHA512195f39c5ab1d13a02c98a9e1492b7e973498956be923d05697760f425049fc192abaf0e53832464a231e9162d3c43637eee1f045fb1e6a28d728273b90a84f4c
-
Filesize
26KB
MD5408df44ec9ce27aa54dd4f6e8102cda2
SHA18f621db05618b632b0673e11acbd4667479b3686
SHA256121686171d72cb8606fc89a575cfcc90908bea383c742a9855a469683922f4f9
SHA5127c3d8512300232b2cc3aebb9301a794fc52905cf7bccadc3df4e8d1ab4ddcc462160d953a1ec51eef56f6cb05beddecd6a1a21e64119a9bed86823d14a3db2a1
-
Filesize
1KB
MD5d0a9aa7b96e1db87f11889208b215f6b
SHA1f619d20adb977c19e29bc1977c136b16edd9ff31
SHA256160bcbf76db4fadd50c3a3abee1c617027b71a4d913d470fa1ed8208cfe69c2f
SHA512e70b1c9290fc0ce8f225a385ac34055e3b8d5ca569fc2268e6931df2028a6b2bfee8254f4717cade785aca7d9a4e989408797bf5ccffb80022eb48487add1b47
-
Filesize
1KB
MD5469032f670a8d8dccabab42794bd5dfd
SHA19337bff3bf58e664d7283f438e4a194c1eabf7b8
SHA2566ca0071aa8299cbd4b8c0e8ea3994878a6adf35b102b6053234de7ec9cfe60bc
SHA5129f27b203c8ea813f7e46115e4e325bdda1e95f127f1854a90cd9eec5c5cc3e91a3081c0157799acae4e2f5302c81c7437b44855ed49b0ed0207a749288d77eeb
-
Filesize
44B
MD5928e9a9c2770188728e3cb538abf927b
SHA149826ccadf19113d41c0c5eebe8a3a7830694d23
SHA2561e7f7a54dd08fd894544b2b61ad41a9851656f7f02faa33bec9bbcb542764456
SHA5123138f7f535cec4a9736b5cdc0042c68b53774b63ba7464574737a02147681688c98d816645b1f64881daef9f11a00a0f8302a988af4b9fad8524673975bfdefd
-
Filesize
6KB
MD5036969573ec4e4af2aa16ea73e2fc482
SHA1d0337ff4520b96d4bea44e3f4f902b6d680e16d8
SHA25603b81ecf0ccdb05bbcfe8fc8a78f85f7da574d492a81d59a17a4670e2b9a140b
SHA5122f96f1929011e6ec491c1ca10a32667d902876639f490cc41f934210b66bb84cf0664cffd8fa769c2aa6c72fc9088148ff2691757f3d2b36bee9291da5db5b38
-
Filesize
1KB
MD58396873a19ce8cd72ef207184a6e8c16
SHA1d23aea5de16e69199afd469861faa11dac199971
SHA256cd066b2e1cd75d61abc23a8df154c31142001cb8b03aa8acaa0b2d8ae62a493c
SHA512d8621c340e024a589a6b8d671c4157b343e0e9b76b717cda4b41157f049bf370d72bb2df54ef562a1e336f854001afecad3913cf28dfdbf8943b64a366118496
-
Filesize
103B
MD5b329042c01fef0f3a857022723c8bb17
SHA172e638818277ffd08c26853322251f08951b44bb
SHA256c326f095066971b33a91c49130f06fb48d0e780a3779bc2970e987b46880a259
SHA5123a4479334593aaa5f4d9177cf4159ae7feb285b146fc03f282e38075380faa9f99c107636360e4ef3d2382e37873b2d7cff2b7d00292f11a980ba967799d4389
-
Filesize
1KB
MD5cf1411b3ad017737ca7cd6bde1e16889
SHA11fb89291b97237318354b3df6a8c380960117c8f
SHA2561bfa623bd168314fbe0a482c8b778aec0305c08fda7d722da93d0014c1793ad1
SHA51227292ae76bc11b66414fedbe1a7a0a46520ebd6aba823d3a3d7ed163f3a4e9a91c2857030189d3bc705c35cff34239679a0fe17544a44254eb5f014b60074f88
-
Filesize
1KB
MD541d44b879b4ae9bff6a78c1187d90280
SHA1807059de70fc0036e0644804f0170da91b900006
SHA2567b47a14c272c9fe0089e4298d66e2a865a53b382e33a13bb190666badf77dd30
SHA51244672da8442cf2ed02872abf1b0e218251002b6d0d7145d3556661efbc24b55a1987817eba2f67b7a95c555b40d070ab68d0c3b7993ed7b822b9d747416be576
-
Filesize
388B
MD5761f73a7bd5e5a4094a13cb23a156ff1
SHA1e5593b257159899fb2cf9c451e2acfc915ce1f26
SHA256f14fa389d8a4f21823c9fa13ff804278a02fe25a97c37dcaea3fc1adcb81f638
SHA51257f6fc7a468712d6b70e2ea18543e7cec64f3bf73937161cafa63ba5239c9b31113178ee3d919a2b5e5433bfc33618603989fbbfb2a05f6ae330eccdd99d64c8
-
Filesize
2KB
MD50f44a2272716289251504283485eccc3
SHA1ceaedb555ca37e6c5e12439557d030e27626903c
SHA256bf030937553ae2c4906978eb1b8d68a6235ce4ee6f1682c02b8db0e82596b1be
SHA51275250b59aa0b16832b1923c39b68a7881ca425761deb5e22efb59934df5dee8895cc5ae54ea9c08cec465d7113155a2d8defd3a7f21c8caf98a1b8d98dbd8b19
-
Filesize
89KB
MD59118381924c51c89d9414a311ec9c97f
SHA171cce71820cc47b3bd1098618d248325fcf24ddb
SHA256951d6bae39eb172f57a88bd686f7a921cf060fd21f59648f0d20b6a8f98fc5a5
SHA512496d1b07bcd838dcce15d4e880b33c985fa5a6f49a3c7e7983e472c95f3e751664896e67fdcd603601a4e62db17f30cb4e63c7bd20aab1a884a19243893a135a
-
Filesize
17KB
MD5edc9940a31a6e236a6417f4bb645304a
SHA17152331767c0db83a5e8d81e30239fae6bb1a267
SHA25642fd562f2439c64e8d5b358eadd510271ec2342ddca3beb9d35d15dc871d0603
SHA512c4e25d46fd2e78e6bb85506d6841bd1f8c5cd0131984306d3911f98d80d1f33eccbe07f92fa5477bd13397ddf6a4b9016a5e4afc6898d122e492b24e436b3e62
-
Filesize
2KB
MD53aaec815e15f35f7a9aa153e012ef2fd
SHA15bf847d8e0e6560f29f5839fcb7fa6bbd03aad64
SHA256ee6f749f88ca8f0c23cb0489bc6c913060b4c7f0e312024e18a36490e71974cf
SHA512b811e1a620248050d2628dec183eb4c79df07ccf07dc1e362f7f34709ca7f2f1d8ed7f7d18647eddcd22ce095b66971bbd095680b642b0377d277f6b3ed90919
-
Filesize
120KB
MD5c9f333d1ff898672a34805f94a265329
SHA12deaac66698fb2e9b3868d23034c3211c508b739
SHA25607e546811635574c77edfda126b0e5f5292b4ea13f35158eddedcfc3cbf74b6b
SHA512048c71e48e2def0bfc69ebfb69b834d650a9377082782333f50728fdfd6675df8093d0c87e606022e55d09f81549d4ca3b640bcdd33b9ddc9aace03ee1466add
-
Filesize
320KB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
920KB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
4KB
-
Filesize
320KB
-
Filesize
1.4MB
-
Filesize
4KB
-
Filesize
920KB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
1.4MB
-
Filesize
364KB
