Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

1471a4f71e...18.exe

windows7-x64

6

1471a4f71e...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    144s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 18:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1471a4f71e5b9e929489b56f58b4f190_JaffaCakes118.exe

  • Size

    134KB

  • MD5

    1471a4f71e5b9e929489b56f58b4f190

  • SHA1

    3bbe0885749bbffd89063a9e9b7998467692b634

  • SHA256

    aed9a85f6c1cc885b43a24dbd43f9c36b6baaf05b5b904c42a4ef43b6f1773d8

  • SHA512

    be7a96938a64665063dda0f1f5d9999aafdb2e2eee07e95356ed92f426af2ca135a6d838aaf09d9aa77af32ac70d477b6772939a6b4a82e00c1f6f386b148ca7

  • SSDEEP

    3072:ytExij3pO5wUajYbgsYlPbQK2SGXKSpH:ywij3E5w1UbtusSyKSp

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\1471a4f71e5b9e929489b56f58b4f190_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1471a4f71e5b9e929489b56f58b4f190_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2112-0-0x000007FEF56D3000-0x000007FEF56D4000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2112-1-0x0000000000240000-0x0000000000268000-memory.dmp

    Filesize

    160KB

    Download

  • memory/2112-2-0x000007FEF56D0000-0x000007FEF60BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2112-3-0x000007FEF56D0000-0x000007FEF60BC000-memory.dmp

    Filesize

    9.9MB

    Download

  • memory/2112-4-0x000007FEF56D0000-0x000007FEF60BC000-memory.dmp

    Filesize

    9.9MB

    Download