44d798c8cc968a5af249cfd8ee1c9f72cb5cb6665953c5bf63c168c5a3253e76 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

d63a9bc7df...18.dll

windows7-x64

7

d63a9bc7df...18.dll

windows10-2004-x64

7

Sharing

General

Target

d63a9bc7df881e95c68ee4948aab6079_JaffaCakes118
Size

312KB
Sample

240909-np4z4axhna
MD5

d63a9bc7df881e95c68ee4948aab6079
SHA1

bdd980dc3baaf5c3e10ccecae5f8ffecf979f173
SHA256

44d798c8cc968a5af249cfd8ee1c9f72cb5cb6665953c5bf63c168c5a3253e76
SHA512

af209c668b005adf748934adb2f49bb0e30c3a5f6438ba1fa3ed19ea3c915e3316f5f746e04b826cd41630ce3587dae6faaab9ab5cd804cb8f1dd5e9d25dd8ec
SSDEEP

6144:0xb9UkIvsGyQytWIn9obMgSC+PpZp+TEBAw4YEbdoOLX7S4xkmOfG1X:Qb9UkIvn/o2bjKj/4Y+X7S4xkmrX

Score

7^/10

discovery vmprotect

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

d63a9bc7df881e95c68ee4948aab6079_JaffaCakes118.dll

Resource

win7-20240903-en

discovery vmprotect

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

d63a9bc7df881e95c68ee4948aab6079_JaffaCakes118.dll

Resource

win10v2004-20240802-en

discovery vmprotect

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  d63a9bc7df881e95c68ee4948aab6079_JaffaCakes118
- Size
  
  312KB
- MD5
  
  d63a9bc7df881e95c68ee4948aab6079
- SHA1
  
  bdd980dc3baaf5c3e10ccecae5f8ffecf979f173
- SHA256
  
  44d798c8cc968a5af249cfd8ee1c9f72cb5cb6665953c5bf63c168c5a3253e76
- SHA512
  
  af209c668b005adf748934adb2f49bb0e30c3a5f6438ba1fa3ed19ea3c915e3316f5f746e04b826cd41630ce3587dae6faaab9ab5cd804cb8f1dd5e9d25dd8ec
- SSDEEP
  
  6144:0xb9UkIvsGyQytWIn9obMgSC+PpZp+TEBAw4YEbdoOLX7S4xkmOfG1X:Qb9UkIvn/o2bjKj/4Y+X7S4xkmrX
Score

7^/10

discovery vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryvmprotect

behavioral2

discoveryvmprotect

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.