Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    44d84f318f49e138bd56d26ee4b60421_JaffaCakes118

  • Size

    23.3MB

  • Sample

    241015-ad4nasxclj

  • MD5

    44d84f318f49e138bd56d26ee4b60421

  • SHA1

    7b95ee2589398cbe71c22561a38be13bd4467e4d

  • SHA256

    56cae288ee86c68d1bed935233f73d6cbfaf241bc8278b1b967128d29e1f0f9c

  • SHA512

    e8aa3b61988064824dc46795df572848a857e8fd5d5ac34d48389cde864970e9aa916ab0fb414671d042e48bfeb52d00e51b6992f4c5c0c965eeb8c8d8c88c06

  • SSDEEP

    393216:r0IzB2Kg/o0136MAxwg0OJFKOHS5X4cRYzT8/+FpTmvff9mh7zekbx+/3hv7pMSQ:DzBhyo0cMAxH04STROFp84hI317p+fFr

Malware Config

Targets

    • Target

      44d84f318f49e138bd56d26ee4b60421_JaffaCakes118

    • Size

      23.3MB

    • MD5

      44d84f318f49e138bd56d26ee4b60421

    • SHA1

      7b95ee2589398cbe71c22561a38be13bd4467e4d

    • SHA256

      56cae288ee86c68d1bed935233f73d6cbfaf241bc8278b1b967128d29e1f0f9c

    • SHA512

      e8aa3b61988064824dc46795df572848a857e8fd5d5ac34d48389cde864970e9aa916ab0fb414671d042e48bfeb52d00e51b6992f4c5c0c965eeb8c8d8c88c06

    • SSDEEP

      393216:r0IzB2Kg/o0136MAxwg0OJFKOHS5X4cRYzT8/+FpTmvff9mh7zekbx+/3hv7pMSQ:DzBhyo0cMAxH04STROFp84hI317p+fFr

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      4e96f412a8cc653053d5d918df6b0836

    • SHA1

      a3c7d59043feecb1603874b27c23d4166b341f2d

    • SHA256

      e4a54bfc327986a89165bdef361069810aaa985c3abecd442c786725fabaf977

    • SHA512

      2fec61b4ad31250bdbdbbfd551d831801790b96902c67200661e8f4f2753378bbf6c0c88b12e1be9173a29597827c1c4809511b6d52666dc3324bd7031c8229d

    • SSDEEP

      96:IiqA7bDe2xHkR1C41EhvSE+6nNtMn0iGd8CqRLqtJ1trRhElfL:IiqA7/ZH0uQMtcfCqo/tdgf

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    • Target

      $PLUGINSDIR/WaterCtrl.dll

    • Size

      16KB

    • MD5

      aefd35a23680fda066a05e4b5f6dc88e

    • SHA1

      8278021d560722701c1f3b91b85ed96bf34bed0c

    • SHA256

      bbc65291a3bcfb6559c391e251bca12d6b935a8a8de0825443642aa2b5e39e78

    • SHA512

      7ac32589e0bf8889e36184058e1f2ae0a0b6c701188ed18fbaf5b45afcff06eecb760d29e342953d50091fb14ef2ee8fb3285a1ec2c1dadec3ecea18fcfe56a2

    • SSDEEP

      192:BwgCxGHBykilusRf/D4WMJSuDVECsID01LkZVAHo4ZVZ9hOX/XDM9IHt:ijkHBeXErZhECsIDCyaH7f9h2/4s

    Score
    3/10
    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    • Target

      $PLUGINSDIR/waterctrl.dll

    • Size

      16KB

    • MD5

      aefd35a23680fda066a05e4b5f6dc88e

    • SHA1

      8278021d560722701c1f3b91b85ed96bf34bed0c

    • SHA256

      bbc65291a3bcfb6559c391e251bca12d6b935a8a8de0825443642aa2b5e39e78

    • SHA512

      7ac32589e0bf8889e36184058e1f2ae0a0b6c701188ed18fbaf5b45afcff06eecb760d29e342953d50091fb14ef2ee8fb3285a1ec2c1dadec3ecea18fcfe56a2

    • SSDEEP

      192:BwgCxGHBykilusRf/D4WMJSuDVECsID01LkZVAHo4ZVZ9hOX/XDM9IHt:ijkHBeXErZhECsIDCyaH7f9h2/4s

    Score
    3/10
    • Target

      Play.exe

    • Size

      11KB

    • MD5

      1134f66f25d3afbdbe673cc64c56f199

    • SHA1

      1330cb531dd224055099067df100714cc8155fb4

    • SHA256

      2728be960c0946235eac5fe23e1e8271e9c0b11dcc4b3f167e51e15b5b7f930c

    • SHA512

      02f4a0a0682523952869ebb40972740d71f7e63b3ef64d38b405706e73b71bb6d996f078a61cded6ae2e3042b40ffa01d2df9ee7f0d36ad414ab064168f7c2f2

    • SSDEEP

      192:1fpaWsiwUvefYT0OZP1Vkvi6L5fXBKbtQG5TUrB1mTkJS:xpyUmQDJ6VXBQKgUrBFS

    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      PlayGame.exe

    • Size

      506KB

    • MD5

      76353f66cb6cb640a162c88f717f9201

    • SHA1

      64da2b5e5b1386ede25627479702c3b617624633

    • SHA256

      3ef48a70f5bc9ac34fbacc0add53f11c1f627e90da8a7d75a41ee7117ce32121

    • SHA512

      25e8a53c93167ed7fd0e97670af40a682aa3f5bb77b0f8d11718b95c6b80156395da7f9bbb332b76938aa631524a469f1cb41e1c1bf60b370f54306c2fe06b95

    • SSDEEP

      12288:MrnkzL6RcJq3U+LKyB/AGBZrTBSn7q8G8luor8S+mGv:MoQcJj8KwBSn+Iw3SpU

    Score
    3/10
    • Target

      Uninstall.exe

    • Size

      94KB

    • MD5

      22294366347928048ab996d93e93bd93

    • SHA1

      e806bb7039d18cf3f9a305945e62944cb057ba8f

    • SHA256

      28f94bbb3e8cb7c7ce62f4c9436777f602243f011161eb44e66621c44448799e

    • SHA512

      fd0b56914bfd9d153d86e34d8692035d81c7e7b99fa6d478a6aa383aa336a403c7393586b046cf2788df585c6a7820b88eed6da5959b986348cc56e1c18dbb2d

    • SSDEEP

      1536:lyZMSZFvknTePMZd4k4kJJ2VeGpEz0IURH8w9MavyIWCAurLGg5ookci:UZMJnTeM4cJJ2Y7zORcw9OILhi

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    • Target

      mame.dll

    • Size

      714KB

    • MD5

      a0833ee2c4b5deed6de9178f236aca62

    • SHA1

      c67f816cec58b15a88a7366a54d5cfae7b44e405

    • SHA256

      7adb9072d4f25678b6f8ccc2029191fd236f649bcd9ca2d9cde9effe10d59196

    • SHA512

      9eff70bebd7e185a536fe3df84b8e0b6c9594271c6c05c3bf3c9dd2b4d48255d57c5e148000876d0a2096b77e6363f0349a5946f6ec2b16ac45b1313e5226caa

    • SSDEEP

      12288:behSKWMHDM74blyyiG6PPfeD9Rc7mM1CRYCVzEmNtF2qOnZSka:behSKXjg44y5D9/l9ZOnZ

    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      roms/֮ȭ3/Mame32.chm

    • Size

      115KB

    • MD5

      a197174720acb2e0917253e6c983ddb9

    • SHA1

      707dabc9c496239d818f57d6dcc9029350adfbe0

    • SHA256

      ad8b509ca1471c69c052230777cd14a5ae947e9e9a2ab3553be797c3b9af80a5

    • SHA512

      6952c3e703feee7e96e4a12e6443322e8629aa74104d806e6363d03eb79d6c9f309661d50f50257b4a526ca3b8dfdd7ef3e02fc096942686e1d25dcc9c957ab3

    • SSDEEP

      3072:0+QtQ9EkuJDop9QuUdr2pwCGTC+0vCC0PzJYOwMsU:0+QtQif+p9QttEXh+KezJH5

    Score
    1/10
    • Target

      roms/֮ȭ3/info/Setup.exe

    • Size

      200KB

    • MD5

      48cbcd29e5517b24fbfb4fc23c21572d

    • SHA1

      a1e9aae3b1ff16e79a0505dadd47cb900b344e1e

    • SHA256

      4cedf7277a46d234f5bc4cfed6b961d54fde2e631ac616f01ca135d20cdf1252

    • SHA512

      325a4fafa733a365408afadb1dc3ff25500693a0fc52475564ff0ffaba7817e2bd1e621e11c8ec7fec453483ad34d71eef36351a58d49e26aecfdaf926355785

    • SSDEEP

      3072:rPR7+aHcdZui1vQrb9xRdx0TZVnEfH7syxtpQLoSRTmRmZuD:rpLsZRcBx0VVnKdTSmMZuD

    Score
    3/10
    • Target

      roms/֮ȭ3/kailleraclient.dll

    • Size

      31KB

    • MD5

      919aceb24360595da69d975e08a08ea5

    • SHA1

      15d2a05133047fabeee62de7d5df533106d29f2b

    • SHA256

      454440aeedb3b569bf49f11c953d0d5bb8ba42ff60d58c8ae6696eecc920280e

    • SHA512

      358fbcb31db1ab882c9ed7415be96962f5a22eec6417ef1537dff95271cee3cb4f7c8eb7685b8f5cdce316d530ac23ff303ace68d2cf83d8decb221b6789dbcb

    • SSDEEP

      768:2LiLjbKGY60H17PJc/TG0BXOZDRmDOCjq/:UK/Oh17PeqAgDRmal/

    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks

static1

upxaspackv2
Score
7/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discoveryupx
Score
5/10

behavioral16

discoveryupx
Score
5/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
7/10

behavioral20

discovery
Score
7/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discoveryupx
Score
5/10

behavioral26

discoveryupx
Score
5/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discoveryupx
Score
5/10

behavioral32

discoveryupx
Score
5/10