Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1413cd0bbb050dc0805d78ad1ec14bd7_JaffaCakes118
-
Size
581KB
-
Sample
240504-xrt3caag43
-
MD5
1413cd0bbb050dc0805d78ad1ec14bd7
-
SHA1
06195de2c8dcb6910dfe0a4a9911b27ff0beb881
-
SHA256
d664f449292cba95827bf59bb21e36e7893ef368da432008b837934c65286f4c
-
SHA512
300293dfbf05025749e8bf23bf48129fcc3002d7870c380a8d9f68f7c7a01f1acc47fb6efa203eee0d2e089c61308227673fc1aa74deb1b26f263bd0e035617d
-
SSDEEP
12288:WU4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9GlJ:WU4hmjrebk29PdR0Kponczne4W58
Static task
static1
Behavioral task
behavioral1
Sample
1413cd0bbb050dc0805d78ad1ec14bd7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1413cd0bbb050dc0805d78ad1ec14bd7_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/kaxgcem.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/kaxgcem.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsisunz.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsisunz.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
1413cd0bbb050dc0805d78ad1ec14bd7_JaffaCakes118
-
Size
581KB
-
MD5
1413cd0bbb050dc0805d78ad1ec14bd7
-
SHA1
06195de2c8dcb6910dfe0a4a9911b27ff0beb881
-
SHA256
d664f449292cba95827bf59bb21e36e7893ef368da432008b837934c65286f4c
-
SHA512
300293dfbf05025749e8bf23bf48129fcc3002d7870c380a8d9f68f7c7a01f1acc47fb6efa203eee0d2e089c61308227673fc1aa74deb1b26f263bd0e035617d
-
SSDEEP
12288:WU4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9GlJ:WU4hmjrebk29PdR0Kponczne4W58
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/kaxgcem.dll
-
Size
153KB
-
MD5
64ffd6dbd03f55408fbc6640317368f0
-
SHA1
227d86d47d53d5f62a2227e6d2b282519d38005d
-
SHA256
b8d9b2c53ea62560b03c2ef9f139370380b4c931d1fc02172bc7e1a98e41ffc3
-
SHA512
ba03c31e00ec24a7bd4e59088feaee3eb389b459cbd041613222f95d9ea1689920127d390d81c2e0000ccf72f67a2043cf81dd324cab3c887003aa93783501c8
-
SSDEEP
3072:GIM31De7jBYnZRWxnXnCjTDX/+dG/QsSauQ:9M31EzyjTjIGcQ
Score3/10 -
-
-
Target
$PLUGINSDIR/nsisunz.dll
-
Size
40KB
-
MD5
5f13dbc378792f23e598079fc1e4422b
-
SHA1
5813c05802f15930aa860b8363af2b58426c8adf
-
SHA256
6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
-
SHA512
9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5
-
SSDEEP
384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4
Score3/10 -