Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3a067bacad5...18.exe
windows7-x64
7a067bacad5...18.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$TEMP/licdata.rtf
windows7-x64
4$TEMP/licdata.rtf
windows10-2004-x64
1$TEMP/rkverify.exe
windows7-x64
7$TEMP/rkverify.exe
windows10-2004-x64
7General
-
Target
a067bacad57182cbbc45f2fc7263790c_JaffaCakes118
-
Size
328KB
-
Sample
240816-3n584avbmg
-
MD5
a067bacad57182cbbc45f2fc7263790c
-
SHA1
f648add61310f6d1c7fd2ca7a0b1e7304ea82891
-
SHA256
1d1250b78aafcd3f5c0e9784c164e5deb8a67e68604dc502803f7656d4b68f00
-
SHA512
8732b2dc80df148306bc82d6b03b3cd784b9ad4e7c7a310d371745e45a637f9904f5897de61df0a92387d7ca8ce99cd13e057a650919158f5099943e407629be
-
SSDEEP
6144:ze34tInplRit+5ksQXzGWNk/r3bNb8vYsXaV4/CqfYIlQJNtG:rIplRmKit6jLZsKu/qImi
Static task
static1
Behavioral task
behavioral1
Sample
a067bacad57182cbbc45f2fc7263790c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a067bacad57182cbbc45f2fc7263790c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$TEMP/licdata.rtf
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
$TEMP/licdata.rtf
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$TEMP/rkverify.exe
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
$TEMP/rkverify.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
a067bacad57182cbbc45f2fc7263790c_JaffaCakes118
-
Size
328KB
-
MD5
a067bacad57182cbbc45f2fc7263790c
-
SHA1
f648add61310f6d1c7fd2ca7a0b1e7304ea82891
-
SHA256
1d1250b78aafcd3f5c0e9784c164e5deb8a67e68604dc502803f7656d4b68f00
-
SHA512
8732b2dc80df148306bc82d6b03b3cd784b9ad4e7c7a310d371745e45a637f9904f5897de61df0a92387d7ca8ce99cd13e057a650919158f5099943e407629be
-
SSDEEP
6144:ze34tInplRit+5ksQXzGWNk/r3bNb8vYsXaV4/CqfYIlQJNtG:rIplRmKit6jLZsKu/qImi
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
20KB
-
MD5
7569b23f19a0f5cb4c1d3b30a296c4bb
-
SHA1
c5f3546b3c795e46445393960694a2341692ddc7
-
SHA256
615bf32e15aaa8d58832df2298f75dd2b29ea5f25bf152c99630315cb618a31a
-
SHA512
11663bf180f9540ad247957b6793f8afd1b4e66f3b692b4ad05735f07459dd524571245928c40e26e3de691472508f5632fcd4add1eebad559d504eca32c08a9
-
SSDEEP
384:gBCwUYeQ8geEQyhUtXlcgCHe8DSMk8/UhU7ya4Lp0Ac9khYLMkIX0+GvRgbJ1:pwUEpet1cgCHe8DNN/UhUua4L
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$TEMP/licdata.rtf
-
Size
4KB
-
MD5
5f333f4d98424ef810164697db684a20
-
SHA1
dea3f43c2e3d2a74e70505707245cfd158e5914b
-
SHA256
28e34433fec59e998e618dd41d51693e35f8b927bc980af5b5f897360b6ae7f6
-
SHA512
d215e905670cc32eeb995e8b84c918d78bad19de32de46c85fd8fe952fcb684801262639f082bfc5456dde41040b5185783a5b675fff1096c803ea32ac438064
-
SSDEEP
96:TJ+JU9GtK/i8Jn9S9DSJ9zSU9or3dHXqFeZJyxlHSErwztK0:3YK/JJnsRSJZSU+LdxryPSEQK0
Score4/10 -
-
-
Target
$TEMP/rkverify.exe
-
Size
368KB
-
MD5
7ce09413d7e39a8d984d29b032499a68
-
SHA1
23b404b6d460c57572e277883527a7af053dd7d2
-
SHA256
7d9967027f313bdc045565d408fd278600d2f59557ef943b1dedd65a2bc2c320
-
SHA512
27d75e7b62310c0203b71a57d296798a5201d3b7ead5fa946073a328ace9174f66f540069587ea982d84dd603f5181b98ca6ace1df654c8f6068dc520cc7dab2
-
SSDEEP
6144:80Qrfc/0PXVVw0uHfQEVjwYcvsbkxbUSicNtUmUTBqwNtolgFV4/PxxCNlMW8:80QY8PXTwz7w+kWcNqmUTsw0l6u/P2N2
Score7/10-
Loads dropped DLL
-