Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
346e8b747b9...18.exe
windows7-x64
746e8b747b9...18.exe
windows10-2004-x64
7$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3SPACE.exe
windows7-x64
1SPACE.exe
windows10-2004-x64
1SPACE.exe
windows7-x64
1SPACE.exe
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7General
-
Target
46e8b747b9b01e85a56e92c4bb45ee0c_JaffaCakes118
-
Size
371KB
-
Sample
240714-wl6zaatflc
-
MD5
46e8b747b9b01e85a56e92c4bb45ee0c
-
SHA1
54e27ab133166c6b39cab2ee0aa720fd6b4ad149
-
SHA256
2cb127d9fe410b16a83c525067d705aa2363b8db9881f4eff4f98e688c9c4778
-
SHA512
691a5d6f62000e74ec5497364276b78bfef849f86125191116377ebe01047bb871b28dd0cc49307a166210c9e30430acaa2998ebe82d0ac7c27de5285e9845a3
-
SSDEEP
6144:ReTeM/f+lshe/4u9qHO3YWP/9ZedHbrCf4ajE4u/PalqCJD+67RFAZ0u96:FMH+lsgfDTqS4v4u/neS67rAB6
Static task
static1
Behavioral task
behavioral1
Sample
46e8b747b9b01e85a56e92c4bb45ee0c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46e8b747b9b01e85a56e92c4bb45ee0c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
SPACE.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
SPACE.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
SPACE.exe
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
SPACE.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
uninst.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
uninst.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
46e8b747b9b01e85a56e92c4bb45ee0c_JaffaCakes118
-
Size
371KB
-
MD5
46e8b747b9b01e85a56e92c4bb45ee0c
-
SHA1
54e27ab133166c6b39cab2ee0aa720fd6b4ad149
-
SHA256
2cb127d9fe410b16a83c525067d705aa2363b8db9881f4eff4f98e688c9c4778
-
SHA512
691a5d6f62000e74ec5497364276b78bfef849f86125191116377ebe01047bb871b28dd0cc49307a166210c9e30430acaa2998ebe82d0ac7c27de5285e9845a3
-
SSDEEP
6144:ReTeM/f+lshe/4u9qHO3YWP/9ZedHbrCf4ajE4u/PalqCJD+67RFAZ0u96:FMH+lsgfDTqS4v4u/neS67rAB6
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/BrandingURL.dll
-
Size
4KB
-
MD5
71c46b663baa92ad941388d082af97e7
-
SHA1
5a9fcce065366a526d75cc5ded9aade7cadd6421
-
SHA256
bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
-
SHA512
5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781
-
SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f
-
SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
-
SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
-
SSDEEP
192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score3/10 -
-
-
Target
SPACE.exe
-
Size
64KB
-
MD5
7e34d7132af69d2b537068cfeeddf3e5
-
SHA1
4c583992191940a4543a2e0326331912ea8ec0c6
-
SHA256
b4ca28c435110aacd19d291e3760e921b5a6bbac8a30b39434aeb33ab9e58efb
-
SHA512
38c1a811010d390d7ef4a6db3f0ae55710ae5f4755142930384ebae88d8848692a44dad65b332c397178efc33795528ef3cf67a67b59da361898805b62ef69f4
-
SSDEEP
1536:P2anEFJabKsq6+FVc13BDr2LcUjbrA9kEi:P2MEFyreOxHIjbrHEi
Score1/10 -
-
-
Target
SPACE.ocx
-
Size
56KB
-
MD5
98b581b45406f280ebb2e5188c656f05
-
SHA1
19107a199a26ba61097632896ca9ae26934f5330
-
SHA256
db6f06519987d8e74ef509eab5c31abc00a6d9b81d8ab30a9f99cf7f61fca4bc
-
SHA512
459ae40ecb693b801f8766441af1bb556ff07967169af98be01403bbb5bcd5663c6e473e41bb405b3c40d03da4c54f67f2bafaa720f087eb9bf3c4710c79f9c4
-
SSDEEP
768:GdXXsq9IV78XQAAC6eygSFVC242jb7tdoHVWV0VWVTDvxitHdYXXs:GdXXsyXeeoS23bRihdYXXs
Score1/10 -
-
-
Target
uninst.exe
-
Size
69KB
-
MD5
8ddeb34848577f9853bedbec4924e114
-
SHA1
c31e26ed9956a47ad081213ead5c22967ad5ce2a
-
SHA256
3499f8698c2e87c723b27ee94c8488c2e0d204409223d4a58b660c29cb596bd5
-
SHA512
b3d8e8a7ef7e90e4c81fb3f2d445eeae16e8aae0868161fd7b0a73afcaed2f6cdcd389584f7014e05d06dcb20119e3b5f683a4e22bc3c590d24c1b1b15744340
-
SSDEEP
1536:QyZMSZFvknTePMZd4k4kJJkYRN6QcIAqbu31zQ1x:fZMJnTeM4cJJkqvu3tQT
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-