Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
30830ca3ab7...18.exe
windows7-x64
30830ca3ab7...18.exe
windows10-2004-x64
3$PLUGINSDI...Ex.dll
windows7-x64
3$PLUGINSDI...Ex.dll
windows10-2004-x64
3$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDIR/nswg.dll
windows7-x64
1$PLUGINSDIR/nswg.dll
windows10-2004-x64
1General
-
Target
0830ca3ab79f6e994b0ed323ce278a22_JaffaCakes118
-
Size
124KB
-
Sample
240624-ndqckasgmp
-
MD5
0830ca3ab79f6e994b0ed323ce278a22
-
SHA1
5bc9752470457e64de707eeb0588720b30a0520f
-
SHA256
476fcd091b44ee8aae4a754e2f184c08e03cd3c8c7277e3f71184acf0304aa46
-
SHA512
8ef0bd471287edb93f4439980485007bfaa2ae312960789ca2da75465ed9c7540f10cd857a9413567ce75ea51cf6917d4217633f411aa757eb41d66fa536e166
-
SSDEEP
3072:BQIURTXJ9nHSDAEc8OUW6D6/OP78vU8p9:BsfnyAsl6/OP72U8r
Static task
static1
Behavioral task
behavioral1
Sample
0830ca3ab79f6e994b0ed323ce278a22_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0830ca3ab79f6e994b0ed323ce278a22_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InetLoadEx.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InetLoadEx.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/blowfish.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/blowfish.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nswg.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nswg.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0830ca3ab79f6e994b0ed323ce278a22_JaffaCakes118
-
Size
124KB
-
MD5
0830ca3ab79f6e994b0ed323ce278a22
-
SHA1
5bc9752470457e64de707eeb0588720b30a0520f
-
SHA256
476fcd091b44ee8aae4a754e2f184c08e03cd3c8c7277e3f71184acf0304aa46
-
SHA512
8ef0bd471287edb93f4439980485007bfaa2ae312960789ca2da75465ed9c7540f10cd857a9413567ce75ea51cf6917d4217633f411aa757eb41d66fa536e166
-
SSDEEP
3072:BQIURTXJ9nHSDAEc8OUW6D6/OP78vU8p9:BsfnyAsl6/OP72U8r
Score3/10 -
-
-
Target
$PLUGINSDIR/InetLoadEx.dll
-
Size
55KB
-
MD5
9fae574b1004bb0650eebba3d8040c59
-
SHA1
541583ec14af05915b8efefe520edd4f25914c9a
-
SHA256
73f4a1529acf2ea56d4db9ed8134bed0498cea38903105f7c2af8cc7d11b8db3
-
SHA512
ab25c429301f2d8a2da6b7c2a222c4028ad8e393c67dde83606762a8ba49c6c49460538624a799969dd0b3c810623d7e471c65a390e8661228a621580d7d54c7
-
SSDEEP
768:WFKaQrcF+ntygjX/+qEg469TRphsguCtPQpcQaa5jZ19K:WIaQrs0kgjx9TRsg1ox5H
Score3/10 -
-
-
Target
$PLUGINSDIR/Processes.dll
-
Size
35KB
-
MD5
2cfba79d485cf441c646dd40d82490fc
-
SHA1
83e51ac1115a50986ed456bd18729653018b9619
-
SHA256
86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
-
SHA512
cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
-
SSDEEP
768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/blowfish.dll
-
Size
60KB
-
MD5
926e4475c00fb5254c32c876921b77d0
-
SHA1
8a55bc8b6e49021a4abbd441783c41d5e019798b
-
SHA256
d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
-
SHA512
53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
-
SSDEEP
768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score3/10 -
-
-
Target
$PLUGINSDIR/nswg.dll
-
Size
11KB
-
MD5
ba27c6eac527078c6786b585367d6b59
-
SHA1
cbc4d849bb19719ec755dbdf94c074cbfb78ba81
-
SHA256
28a64b3c13f4ec4b168a9f7b30558f247063c2a95e2bfbe4e2ff58d3c8095ccd
-
SHA512
124f6da8df90919721037f4f957999a5deeaed8e06004e55479673d57d23f06472fd1acde143a2cd0cd4ca46a167c6b6ba68b57f104505553b7a70c679eb2580
-
SSDEEP
192:Oqh5wY9sD9hNfOHfrNAA9C3eFeuFGMHYGd+mnabgKwY3d1mwabuwGPY2wNKPf6xI:3jwosZhN2fr6A86xw0MWGRtwNKQ9OWWL
Score1/10 -