Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

72e36e34a1...18.exe

windows7-x64

7

72e36e34a1...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ch.dll

windows7-x64

3

$PLUGINSDI...ch.dll

windows10-2004-x64

3

cwd.exe

windows7-x64

3

cwd.exe

windows10-2004-x64

3

htmlayout.dll

windows7-x64

7

htmlayout.dll

windows10-2004-x64

7

winzipninfo.html

windows7-x64

3

winzipninfo.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72e36e34a1f4e269d07d108d82bdf2a0_JaffaCakes118

  • Size

    2.6MB

  • Sample

    240726-g1g65s1cnr

  • MD5

    72e36e34a1f4e269d07d108d82bdf2a0

  • SHA1

    89b371c36fe9738362ee2d0cc104fdb202314826

  • SHA256

    c79a261b857b6139662023863d2f65f39f0e13720ffe557d410471565b6407a0

  • SHA512

    f333b741fd2e3b773afb6b5c2de91854f58cd439602264e7c197eaac074e5063e42b1c86e98e266fd0d46de410862087d788e834776ad2dcc567b9647a67e624

  • SSDEEP

    49152:1voJUoKj1+9KXy+GxnekmZkEMbdUaKLBOihl/3p0842/YKEkpEQ3:1vol84oIepkEMZ4cQl/3p0epN

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      72e36e34a1f4e269d07d108d82bdf2a0_JaffaCakes118

    • Size

      2.6MB

    • MD5

      72e36e34a1f4e269d07d108d82bdf2a0

    • SHA1

      89b371c36fe9738362ee2d0cc104fdb202314826

    • SHA256

      c79a261b857b6139662023863d2f65f39f0e13720ffe557d410471565b6407a0

    • SHA512

      f333b741fd2e3b773afb6b5c2de91854f58cd439602264e7c197eaac074e5063e42b1c86e98e266fd0d46de410862087d788e834776ad2dcc567b9647a67e624

    • SSDEEP

      49152:1voJUoKj1+9KXy+GxnekmZkEMbdUaKLBOihl/3p0842/YKEkpEQ3:1vol84oIepkEMZ4cQl/3p0epN

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      cb589d300ffc4e38183880a476eb5aee

    • SHA1

      3c7828ebabbd53305ca7dead9d75858a87cfaf71

    • SHA256

      b40bf86e3522e4504dca095721040d1b143438076a5d299210b654f38f86aabf

    • SHA512

      c3b453c997a8a9fecb2decfe65bdc2810e79ac81b7e9dfa960c05efecd3016fe8f3f20e06b49abdc4112f8e948856ea0fbaccd2c8f5e45f03242d839ccb1cd1e

    • SSDEEP

      192:fzF86tZDWrepiJLEqUErRtdD4fUuMZwt2h8sIGO2x9:fh8TLLweSfUuM0GOC

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/VPatch.dll

    • Size

      7KB

    • MD5

      b2a8be8de58cf1273d0992fd5da7cb2f

    • SHA1

      af4fa16c2bc91a91b72de0e636dafcdc2f894044

    • SHA256

      6b161a1e90516f1f53e69aec387b5f59b2bdedf19cb4eee6f7ade2e82c0a7173

    • SHA512

      b1b0bd40d26d581a0056cc4cece07a929d28e831209017ee3ebfc3d429409842ef3720c0b6ebbd26966e7d647a8da389e317e1152041ca5a0dc78528d733c151

    • SSDEEP

      192:nfzAgqB6un6RfJ6ewWU/5VYFLppWFlZGiQpN1QRvV:fkgG9nkhFhfFLjWFlZGi0Nov

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      cwd.exe

    • Size

      386KB

    • MD5

      53aeeaf4e7f12b8e91b3a474cafb4115

    • SHA1

      b90f3887c035b47fde7280bcec91ce273fbc8f7f

    • SHA256

      c95c0dcebfcb96020248be1dbe04752acdca6971ed81b308dba302b713882d29

    • SHA512

      6ef041f581046dddc58608c9a8ff800eaf4355328ec5132ecc1345fdfbae97b04a88f2b4ab26989a33c4bf2e24f81cb0b9339a58d4e54f6831dd5cab78f42fc1

    • SSDEEP

      3072:/2voeN+jaiG17Ef5KlrKnBZ59oZSmveDlcjIV8jlwIRU+MzERobOiLJ93q8DyWg:+QeNai17Y56rKnBfWhveajzxwIRUOic

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      htmlayout.dll

    • Size

      920KB

    • MD5

      6ed2f0b1b13e068e0e9377298f2c550d

    • SHA1

      8edcb7f3b6b4e578363d12a991a75164a4632521

    • SHA256

      5a63558628f3bc939a393a46d1c201a0fb706ee36f39db5375d2cfa2c72c69b0

    • SHA512

      4b50e8316d170722c7cd717ca8c700e2b1f790531ea750c7fd88864a5a2add4718aa658231d7ba9c8f25ea4478338474762456322c3dba944b34d791856245b4

    • SSDEEP

      24576:h6+0bI4EotRfKHLz70IapiuKKhvTxLAlxXi8iQ:Y+0U4ESRWz70IUqrXi8

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

    • Target

      winzipninfo

    • Size

      675B

    • MD5

      02029ab8b7bc28c3d09e00ba4f941f21

    • SHA1

      67da83f3b8aedc54bf22826a835fc60d23bdca06

    • SHA256

      2469883ccb911d349779bb99d032e72b849fa44cd82780cdbbc0deed41e9e896

    • SHA512

      7c04f50465465a01c059dc73957a131cf99fc8b907c54b2bd7d78cd6154083c5ada9579fbed33614f92d603ec8480579a0d3f05b8b2ee6c3ddc84c0f54df3c76

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks