Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3743ac40c6b...18.exe
windows7-x64
7743ac40c6b...18.exe
windows10-2004-x64
7$PLUGINSDI...ol.dll
windows7-x64
3$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3EngineApiWrapper.dll
windows7-x64
1EngineApiWrapper.dll
windows10-2004-x64
1Filters/LC.dll
windows7-x64
1Filters/LC.dll
windows10-2004-x64
1Filters/License.rtf
windows7-x64
4Filters/License.rtf
windows10-2004-x64
1Filters/Re...or.exe
windows7-x64
1Filters/Re...or.exe
windows10-2004-x64
1Filters/elaudec.dll
windows7-x64
1Filters/elaudec.dll
windows10-2004-x64
1Filters/em2vd.dll
windows7-x64
1Filters/em2vd.dll
windows10-2004-x64
1Filters/empgpdmx.dll
windows7-x64
1Filters/empgpdmx.dll
windows10-2004-x64
1Filters/register.cmd
windows7-x64
1Filters/register.cmd
windows10-2004-x64
1Filters/thsource.dll
windows7-x64
1Filters/thsource.dll
windows10-2004-x64
1Filters/un...er.cmd
windows7-x64
1Filters/un...er.cmd
windows10-2004-x64
1IPDev.Skin...gn.dll
windows7-x64
1IPDev.Skin...gn.dll
windows10-2004-x64
1IPDev.Skins.dll
windows7-x64
1IPDev.Skins.dll
windows10-2004-x64
1Analysis
-
max time kernel
135s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
26/05/2024, 03:43
Static task
static1
Behavioral task
behavioral1
Sample
743ac40c6b7ef79481773fd14dc6bfe7_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
743ac40c6b7ef79481773fd14dc6bfe7_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
EngineApiWrapper.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
EngineApiWrapper.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Filters/LC.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
Filters/LC.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
Filters/License.rtf
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
Filters/License.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Filters/Registrator.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Filters/Registrator.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Filters/elaudec.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Filters/elaudec.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Filters/em2vd.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Filters/em2vd.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Filters/empgpdmx.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
Filters/empgpdmx.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Filters/register.cmd
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
Filters/register.cmd
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
Filters/thsource.dll
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
Filters/thsource.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Filters/unregister.cmd
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
Filters/unregister.cmd
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
IPDev.SkinEditor.Design.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
IPDev.SkinEditor.Design.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
IPDev.Skins.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
IPDev.Skins.dll
Resource
win10v2004-20240226-en
General
-
Target
743ac40c6b7ef79481773fd14dc6bfe7_JaffaCakes118.exe
-
Size
8.4MB
-
MD5
743ac40c6b7ef79481773fd14dc6bfe7
-
SHA1
f5b04c1a4fb752ab750a1ef91313bd6f7095eb61
-
SHA256
94fef3ee9512941ff1aa4c8a951598ae67c42b71fbc047d28f3164570497d0b0
-
SHA512
0104cbb1c5ec5610ed760289ada227921be8c1f526e5de0adf516ebad972cf1eff20fd59ac85a7cf1ea121f6036b4c67147f7d04515dd6f401376a3f11bcd164
-
SSDEEP
196608:TUWVop/eZE87qzzvrAhPtqCybuUuXwEED0Yoj:TUWyp/e+RfvrsPtyfuXwEED0Yoj
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 4600 743ac40c6b7ef79481773fd14dc6bfe7_JaffaCakes118.exe 4600 743ac40c6b7ef79481773fd14dc6bfe7_JaffaCakes118.exe 4600 743ac40c6b7ef79481773fd14dc6bfe7_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD507f44600b7eb220c2606e67a6d3f679d
SHA113b3aa534496ffab2597cc8ff3689cd91facc89d
SHA25659f7effd3d516dabf92a41e9886c307bd26f0e0985d637414eba1b3f9f720dab
SHA51263ec9038b718da687065f3938f87391c7925577b656c63cf5abc32de5b7daa7363f07ce973d2af8ea347321a3d1c543273b6cb1ca30eb414c8657f90cd0268de
-
Filesize
11KB
MD5f55b41485cbaf292389a52f8e4f0594b
SHA189e9b0d1291fa78a40cab358553c447cbbeaa130
SHA256f16bc2ceb7a6bc7df0955530e72b0aa072ce27650c5cf7b33fd4ea82dea196fc
SHA512938e8661b8cf418608156dc813c1eb0cc3fa5efa9483061a152bb103c4d821d5c6a82d4c110729e9686f99ccd4da188aebb38a85a01d8ecadb34bb9f6ba60d09
-
Filesize
721B
MD5b5390e5a1175092d7c1cfa520dec8090
SHA196f8a87ac4b75fb7e20cec98f4cfc776c0320164
SHA2561e409ac8fb1f0697f260305f2c387bfd43214513aed6cefc8e95603c65e511f1
SHA5126178f159c957b74c72a212224e3d2acc9b0949bd08984ef465b8ffd7e0fb29ed60af95d40c4b6b795fd5136ccea3c32976dbe6e9d1bf0f0a9566aeb71e7ecd1d