Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b1c5a88d32eaa3423576f31445413b37_JaffaCakes118
-
Size
1.4MB
-
Sample
240821-cvlvxswalf
-
MD5
b1c5a88d32eaa3423576f31445413b37
-
SHA1
29f760c739630b0dc75ad376c46ecac6bff87da3
-
SHA256
674036a975467ebf675e7240947f4206c693ef68e125c71e1e410d33aae2f12c
-
SHA512
7b1a3b574c1f687de2dbc6394360e8534e44062c4018b60dfbb0d265a7167dc495dfca925fe2806ed484e6278ed81064e666780e4593a669eb9ca40d9674add2
-
SSDEEP
24576:bLmqqqHPAK1Ms/0sWAVGBPgbLbhSnCWcW+WlxLfCGHujAJ19HOB1YY1Hx6HiLnzP:Xmq5PRSS0/PgzhSZGaxJOjE+YY1R7za0
Static task
static1
Behavioral task
behavioral1
Sample
b1c5a88d32eaa3423576f31445413b37_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b1c5a88d32eaa3423576f31445413b37_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$TEMP/VirtualDub.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$TEMP/VirtualDub.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b1c5a88d32eaa3423576f31445413b37_JaffaCakes118
-
Size
1.4MB
-
MD5
b1c5a88d32eaa3423576f31445413b37
-
SHA1
29f760c739630b0dc75ad376c46ecac6bff87da3
-
SHA256
674036a975467ebf675e7240947f4206c693ef68e125c71e1e410d33aae2f12c
-
SHA512
7b1a3b574c1f687de2dbc6394360e8534e44062c4018b60dfbb0d265a7167dc495dfca925fe2806ed484e6278ed81064e666780e4593a669eb9ca40d9674add2
-
SSDEEP
24576:bLmqqqHPAK1Ms/0sWAVGBPgbLbhSnCWcW+WlxLfCGHujAJ19HOB1YY1Hx6HiLnzP:Xmq5PRSS0/PgzhSZGaxJOjE+YY1R7za0
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
f2fc9770e2047526bc45553b940c02fe
-
SHA1
1a189e20eb573d99f4f18e0312dd79865d33f0ac
-
SHA256
b85643e91344506caaeacf97d6ea6dfcf7d62a21b117a516e0162d8f22892639
-
SHA512
b922d9dfc6653809fe6e5af8dfc12f5853d6226e15b0575a7a42c03ab6394773627ae7b63e9e0da72e462169f0f233e93a85082562bf5897bccc480e0be50162
-
SSDEEP
384:tjbs8upT1Vh0N3U4VdbBw9Aahd2aCX+sv:hbs8upidU2fOlgvX+E
Score3/10 -
-
-
Target
$TEMP/VirtualDub.exe
-
Size
1.4MB
-
MD5
e67336d39099619b0ac36cf03e587d6c
-
SHA1
7be2c0fe57505938a4048f80eef9db1beb33e661
-
SHA256
a80205eecab6d42cbf39248298c17befe47270a59ef53098958c7456fd3378d0
-
SHA512
44c3f9e2aba1b7221f4ee77382de3a9a77fb2b06d5f3c1f141e5be152e3b3975f40743eac89cdf23fbe335d84e4e1fbf8a7e85c894f2854ae063a2ca718e48ba
-
SSDEEP
24576:Z81f1lnZUSbLSmSnfPcT+LlxMfCnHnjLJ1nqST1YYvHxZgqLnug5WeCgq6bcDIEJ:Z81f7ZUSqmSnZZxjHjz1YYvRtuaWeCgq
Score3/10 -