Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

da2e5c9d2f...18.exe

windows7-x64

9

da2e5c9d2f...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da2e5c9d2feebc33bebf4a4d669040a8_JaffaCakes118

  • Size

    3.4MB

  • Sample

    240911-mxxejsxajg

  • MD5

    da2e5c9d2feebc33bebf4a4d669040a8

  • SHA1

    0d60c5ff7186bf4086f0332cebcf1f9444996d18

  • SHA256

    227a1850e03fb53a3430ed7115f9fc08652e681deca90780d226689ed1a292e0

  • SHA512

    179d957d74185b901fd906f0596e96e24254ef2193f63224a2e170af2106982a920dc8ba32128dcc747997c0e29045418d272be674f48a9e0de418761fe33142

  • SSDEEP

    49152:P5l3vsadSXs4lL3cH1k0albNY4EshSbHSo9j/TrOllMl2oKYB7bOoGk4I09yJuh:Pz0zlQH18l+4EPeot/TrOllU8Jsuh

Score
9/10
discoveryevasionupx

Malware Config

Targets

    • Target

      da2e5c9d2feebc33bebf4a4d669040a8_JaffaCakes118

    • Size

      3.4MB

    • MD5

      da2e5c9d2feebc33bebf4a4d669040a8

    • SHA1

      0d60c5ff7186bf4086f0332cebcf1f9444996d18

    • SHA256

      227a1850e03fb53a3430ed7115f9fc08652e681deca90780d226689ed1a292e0

    • SHA512

      179d957d74185b901fd906f0596e96e24254ef2193f63224a2e170af2106982a920dc8ba32128dcc747997c0e29045418d272be674f48a9e0de418761fe33142

    • SSDEEP

      49152:P5l3vsadSXs4lL3cH1k0albNY4EshSbHSo9j/TrOllMl2oKYB7bOoGk4I09yJuh:Pz0zlQH18l+4EPeot/TrOllU8Jsuh

    Score
    9/10
    discoveryevasionupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks