Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
87e8a8accdac293593f769bd2ea92319_JaffaCakes118
-
Size
441KB
-
Sample
240531-w1avdshd65
-
MD5
87e8a8accdac293593f769bd2ea92319
-
SHA1
4f2480e4fe963a58db2e6afbfb6cf996b1e253a2
-
SHA256
7af496b9b0be5083b3e99fb7d9172511f4de9bc61f6fc33c5379fc5e8db9e729
-
SHA512
14ac33f29f40e84465510f4e0a87f52678528ce278965c8452e835dee80d007d915fb48990e1a7c46f3aedade77c6fda0056c0635920815702e49f0bb8d829e5
-
SSDEEP
6144:WFJ0cPZ6ocdeToy3pjOjznTbWIBO/vsrYtDx9Wb8RTchAn0nqWBJr9WzA3MWYT+f:iPcoroy3CvbWIO8YZx99TmBfc8vy4hX
Static task
static1
Behavioral task
behavioral1
Sample
87e8a8accdac293593f769bd2ea92319_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87e8a8accdac293593f769bd2ea92319_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ZipDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ZipDLL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/hwicqlt.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/hwicqlt.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
87e8a8accdac293593f769bd2ea92319_JaffaCakes118
-
Size
441KB
-
MD5
87e8a8accdac293593f769bd2ea92319
-
SHA1
4f2480e4fe963a58db2e6afbfb6cf996b1e253a2
-
SHA256
7af496b9b0be5083b3e99fb7d9172511f4de9bc61f6fc33c5379fc5e8db9e729
-
SHA512
14ac33f29f40e84465510f4e0a87f52678528ce278965c8452e835dee80d007d915fb48990e1a7c46f3aedade77c6fda0056c0635920815702e49f0bb8d829e5
-
SSDEEP
6144:WFJ0cPZ6ocdeToy3pjOjznTbWIBO/vsrYtDx9Wb8RTchAn0nqWBJr9WzA3MWYT+f:iPcoroy3CvbWIO8YZx99TmBfc8vy4hX
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/ZipDLL.dll
-
Size
163KB
-
MD5
2dc35ddcabcb2b24919b9afae4ec3091
-
SHA1
9eeed33c3abc656353a7ebd1c66af38cccadd939
-
SHA256
6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1
-
SHA512
0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901
-
SSDEEP
3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk
Score3/10 -
-
-
Target
$PLUGINSDIR/hwicqlt.dll
-
Size
125KB
-
MD5
40a2f2afdc75fae2df6c98046b8213a5
-
SHA1
4353ca892730c82bb993b8f33b9bf74d3c2e3c48
-
SHA256
4ebf3abdf86dcd21736e1e3f918145e0b185cf7153205dd86ade90bdf43c2eeb
-
SHA512
447bfab9f40c009ef6d5563a5de74d9b600843ffa71e9d428bb7f329163612fdccef7c7e7739b017de5059af6b14bf93bab4cbc6d7828a5c89e23dc96131aa1b
-
SSDEEP
3072:6vgDAOSB+nF1WaJtK9LY1RO1j16V1+ry:6vg32aKuRsaQry
Score3/10 -