Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

5

3941d43b0a...18.exe

windows7-x64

5

3941d43b0a...18.exe

windows10-2004-x64

5

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...sk.dll

windows7-x64

3

$PLUGINSDI...sk.dll

windows10-2004-x64

3

$TEMP/UpdateInfo.exe

windows7-x64

$TEMP/UpdateInfo.exe

windows10-2004-x64

jpdesk.exe

windows7-x64

5

jpdesk.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3941d43b0a476185d5de8d410fc4809f_JaffaCakes118

  • Size

    1.5MB

  • Sample

    241012-k4lwaashpa

  • MD5

    3941d43b0a476185d5de8d410fc4809f

  • SHA1

    693cd222a9a3af5573835ec97642ea7dd4f88915

  • SHA256

    705a4031fbc12fae0501f96b3487700cc5e60411d78caf58abbd10a7c764212b

  • SHA512

    c425522832a5c8185713115b7716b619f71b54507bca83b2cce091c743a3d53381458e1c781055f8811511647b023afcb2bb47f1edb37e51cb03184e0dd7478a

  • SSDEEP

    24576:Qw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFzyUCXHr+s6KPPqoWMh/50C0:Qw1dILPAX8ln6aB4WP3E29V8S4Dhg0fm

Score
5/10
discoveryupx

Malware Config

Targets

    • Target

      3941d43b0a476185d5de8d410fc4809f_JaffaCakes118

    • Size

      1.5MB

    • MD5

      3941d43b0a476185d5de8d410fc4809f

    • SHA1

      693cd222a9a3af5573835ec97642ea7dd4f88915

    • SHA256

      705a4031fbc12fae0501f96b3487700cc5e60411d78caf58abbd10a7c764212b

    • SHA512

      c425522832a5c8185713115b7716b619f71b54507bca83b2cce091c743a3d53381458e1c781055f8811511647b023afcb2bb47f1edb37e51cb03184e0dd7478a

    • SSDEEP

      24576:Qw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFzyUCXHr+s6KPPqoWMh/50C0:Qw1dILPAX8ln6aB4WP3E29V8S4Dhg0fm

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsWebJPDesk.dll

    • Size

      302KB

    • MD5

      704dfda5b0998820a981e81ad414d031

    • SHA1

      e6387a2bc7b98e7d826eed9e45e7653eb75c8bfb

    • SHA256

      a057243d20b92c344c4f81729b3cbdeff752c78a1a21f04f0ef16eadb461d54d

    • SHA512

      8253f4e1e1f820e84309d89203d98601137f05bc22861f7330ec0747cd80be798cea0caca3cf1c6abdac0c8cc5011dced68213785080253501c03c62028c281e

    • SSDEEP

      3072:JqGaJBifD3FnhMxCq+X1qQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5:MBqzFKxq1qdKcS0Hwjl2Jw

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $TEMP/UpdateInfo.exe

    • Size

      110KB

    • MD5

      2859ea914107d6f734cc59ee633ffef5

    • SHA1

      dfb338b7002fd1c7961ed5ff9c283e5b586906fc

    • SHA256

      ac2856cc952a1a062e1a06e8a2b137411abd3a7a857a0f6e9364e02f66f54213

    • SHA512

      5176dd041c0ef14103c0c02d96bff3b97665f4a01be5d4889239d0dbe67b9e67f5e0919da9fc1ce67e59f58a545e5301c853408d3287ea9c429e8b044957dabd

    • SSDEEP

      3072:CPRrTMPk60wBBDNtPUviRUfK8pXLbuukmJKS/:sBwHDMaKCs7auNJN

    Score
    1/10
    behavioral11behavioral12

    • Target

      jpdesk.exe

    • Size

      825KB

    • MD5

      94cc7d893852cdf3579d086b098f9f6a

    • SHA1

      8b0c5f9a6023fd63ab9188817990a717375d67ce

    • SHA256

      6304717c2918fe40ff2f19a27427a0f387f80ca1d0369b06958d00a52f5b489b

    • SHA512

      1bfc7dec4e7d21fa16681d948f6d68616357c2d3adb6f18e9e30582d4bcd173289967c238c5ef7dd596509bb635e6d186ca4f7fc71fb2af9810982f9990fc79a

    • SSDEEP

      24576:bdpij5pqY8MhqMaNXpUZXHoq6I0F2zR4t:Bcj5pQHMaNXIXIq6I0F84t

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks