Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0e2614021d554b0534d0fb8e50dadd5e_JaffaCakes118
-
Size
148KB
-
Sample
241003-f7zjbsxbjk
-
MD5
0e2614021d554b0534d0fb8e50dadd5e
-
SHA1
1a78dd974bc2346931566d06f17899bdf6ab7971
-
SHA256
9f02093aac7808cb10582b4b2767aa16782f28d00b8b8e9c9d45196e00338cd7
-
SHA512
455c2fe11aea0c99ca6c9a41c474bc028db28566c1173588a56d4a406d6263389548ed1df181931a57735f04a64ca89649e56064f63101d271f6d9739fbaf7b2
-
SSDEEP
3072:zQIURTXJAMeVY06GRKHxN48rdIfbnUT9Pk7x+mowAEq:zsneP+H08rdPTBk+wC
Static task
static1
Behavioral task
behavioral1
Sample
0e2614021d554b0534d0fb8e50dadd5e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e2614021d554b0534d0fb8e50dadd5e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$R3/dvflekzd.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$R3/dvflekzd.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
0e2614021d554b0534d0fb8e50dadd5e_JaffaCakes118
-
Size
148KB
-
MD5
0e2614021d554b0534d0fb8e50dadd5e
-
SHA1
1a78dd974bc2346931566d06f17899bdf6ab7971
-
SHA256
9f02093aac7808cb10582b4b2767aa16782f28d00b8b8e9c9d45196e00338cd7
-
SHA512
455c2fe11aea0c99ca6c9a41c474bc028db28566c1173588a56d4a406d6263389548ed1df181931a57735f04a64ca89649e56064f63101d271f6d9739fbaf7b2
-
SSDEEP
3072:zQIURTXJAMeVY06GRKHxN48rdIfbnUT9Pk7x+mowAEq:zsneP+H08rdPTBk+wC
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$R3/dvflekzd.dll
-
Size
328KB
-
MD5
ef63a544e38c3a3f1f40d51cdd67466b
-
SHA1
5f3e77446c880b9ddcce9dfb26442f2631d9b9b9
-
SHA256
f35d0b4b42d3c8800f146e96924be72e6c3c4cdf5eebd5ae59127e276bbc12cc
-
SHA512
83cdaac3504701319e07a14a18170813dd4914faa1b75e73ae5beeb23a44eb1cdee5b772d606de9938f99c4fe6808998677638970ed1c4639e58b5fa57effff9
-
SSDEEP
3072:x4YhwY/+JeDLUsVQ59c2fRHwjVHqM5IZrqTMa4sb8qLoE+1:nh0ItV01fWHP5Erta4sblV+
Score6/10-
Adds Run key to start application
-