12dae350239569e85555f1fdd052d263526e8e5c67b12a1b6a65ee3c4d9af3d2 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

322fb9825e...18.exe

windows7-x64

7

322fb9825e...18.exe

windows10-2004-x64

7

Sharing

General

Target

322fb9825ef9cb13d6486654fe2b846f_JaffaCakes118
Size

747KB
Sample

240709-16lw3aygkn
MD5

322fb9825ef9cb13d6486654fe2b846f
SHA1

6b35c9af64204cd71f123d1efb38e4039d6dfe26
SHA256

12dae350239569e85555f1fdd052d263526e8e5c67b12a1b6a65ee3c4d9af3d2
SHA512

cc781799aff15986d0208d2a109615269b8dd1f051f3483179d9f97603b652642e1cc1329d168f9ddf4514271195f44850bb6545b484afe43e09c404cae81f4c
SSDEEP

12288:U8F2GlKL2ioCvszUyYoCt3DIi0S80hrRZaqWR40rHeluaL0dUiuRm2Bao5:U8EGALzohzUy2NJvhjyR4kKJRi0+4

Score

7^/10

upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

322fb9825ef9cb13d6486654fe2b846f_JaffaCakes118.exe

Resource

win7-20240705-en

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

322fb9825ef9cb13d6486654fe2b846f_JaffaCakes118.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  322fb9825ef9cb13d6486654fe2b846f_JaffaCakes118
- Size
  
  747KB
- MD5
  
  322fb9825ef9cb13d6486654fe2b846f
- SHA1
  
  6b35c9af64204cd71f123d1efb38e4039d6dfe26
- SHA256
  
  12dae350239569e85555f1fdd052d263526e8e5c67b12a1b6a65ee3c4d9af3d2
- SHA512
  
  cc781799aff15986d0208d2a109615269b8dd1f051f3483179d9f97603b652642e1cc1329d168f9ddf4514271195f44850bb6545b484afe43e09c404cae81f4c
- SSDEEP
  
  12288:U8F2GlKL2ioCvszUyYoCt3DIi0S80hrRZaqWR40rHeluaL0dUiuRm2Bao5:U8EGALzohzUy2NJvhjyR4kKJRi0+4
Score

7^/10

upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.