Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
30880ed8099...18.exe
windows7-x64
70880ed8099...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3WinDjView.exe
windows7-x64
3WinDjView.exe
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
24/06/2024, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
0880ed80993360d6f47d0b8dd33af109_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0880ed80993360d6f47d0b8dd33af109_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
WinDjView.exe
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
WinDjView.exe
Resource
win10v2004-20240611-en
General
-
Target
0880ed80993360d6f47d0b8dd33af109_JaffaCakes118.exe
-
Size
913KB
-
MD5
0880ed80993360d6f47d0b8dd33af109
-
SHA1
3b0c7b6acee651379b9320504d44fca15453d16c
-
SHA256
d58e89fb349366c78287a046823e7392261ca8d6d9b0e93c9a867308986b4398
-
SHA512
2c6f2b1920e5e31b1d2dfe31a4a8d4f1d985f2e0986cd1e0024a825786b3f72af3d96771030838f8989d4fffce52bf7f67f9d9a88089c72d3f40e6ef84c52744
-
SSDEEP
24576:B+7aI6NBhg3aRaYeA2v3PBF2r7/fL+civ6/:BXIK2aRBeA2XBwDLsv6/
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
pid Process 2712 0880ed80993360d6f47d0b8dd33af109_JaffaCakes118.exe 2712 0880ed80993360d6f47d0b8dd33af109_JaffaCakes118.exe 2712 0880ed80993360d6f47d0b8dd33af109_JaffaCakes118.exe 2712 0880ed80993360d6f47d0b8dd33af109_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD51775e8fe7832f0351d4024ba3478c58d
SHA13a2aafd8275f384332f6d08224d927040ce37cb4
SHA256a2a159540c738c7bc4d6ce8dd203bf859078409c0021a2a60f4b0faa5352d375
SHA512362cda0e1f50a8fecde1611863b1c6218962e3ec198ce3641ce50910d400ac647cdc3742888140fd6817ce6b30d83865aa0c72292bb80b1ae86cab419e0fb2b7
-
Filesize
11KB
MD5c6f5b9596db45ce43f14b64e0fbcf552
SHA1665a2207a643726602dc3e845e39435868dddabc
SHA2564b6da3f2bdb6c452fb493b98f6b7aa1171787dbd3fa2df2b3b22ccaeac88ffa0
SHA5128faa0204f9ed2721acede285be843b5a2d7f9986841bcf3816ebc8900910afb590816c64aebd2dd845686daf825bbf9970cb4a08b20a785c7e54542eddc5b09a
-
Filesize
9KB
MD5f2c993a0c726386d72e4640967cef83e
SHA1efe88db252b5e9edff2d859e783fcf1a349e553f
SHA2566739a2c8075cc383620a867e983957de0b4ae9ef0453baadd1469132893d7301
SHA5123873a87ba360702c72a6d3e853a0b6f2df219593cf5436d12a9d4d169029e939993c45330212008b628184da64ae98d6a7ab42b30d5f82c896acfc89d558169f