Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    de05d6e9059d16c24eb5fbd8f83af700_JaffaCakes118

  • Size

    2.6MB

  • MD5

    de05d6e9059d16c24eb5fbd8f83af700

  • SHA1

    6927b2015eca6a33b5812e2806bf1f2ad06a718c

  • SHA256

    c962634c994cac4d2722ce8bc5b73aa10e0a3d46c0ee0b7f24d0cfe522ef00d1

  • SHA512

    4c60ce4d69f40e0ce662f12a4af708261672b753b5b8df3be4b60378d04cd0cc6f6ecababfa4752f1b40b72f6caf804100f3f4d22892b67122c436e4db40d6d4

  • SSDEEP

    24576:IVYbWzOiA80yE23Z5EU22lH1QnxBxabsM8KGH7Co0OLeGrIocE5lArjPPA:hWzOryrZOU22lcx08KGbNLeGMb4unA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • de05d6e9059d16c24eb5fbd8f83af700_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    6013d0b9fb6901d1d5e58a9ae7072103


    Headers

    Imports

    Sections

  • ADVPACK.DLL
    .dll windows:5 windows x86 arch:x86

    c654a5cf569ffb2b7d4ea4076125d5c7


    Headers

    Imports

    Exports

    Sections

  • PI.txt
  • W95INF16.DLL
  • W95INF32.DLL
    .dll windows:4 windows x86 arch:x86

    5f75d18fe563266a560ac1f72bd4cae2


    Headers

    Imports

    Exports

    Sections

  • active~1.htm
    .html .js polyglot
  • config.xml
  • data.xml
    .xml
  • fngrprnt.dll
    .dll windows:5 windows x86 arch:x86

    95d5d555032868a55dfb71899f3429a4


    Headers

    Imports

    Exports

    Sections

  • mega.gif
    .gif
  • messen~1.xml
    .xml
  • msnphoto.scr
    .exe windows:5 windows x86 arch:x86

    27c0cb43ce1328947820bbb6d57a276f


    Headers

    Imports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • pi.inf
  • pibase.dll
    .dll windows:5 windows x86 arch:x86

    43d41b64a35570823063ac5e40244bd9


    Headers

    Imports

    Exports

    Sections

  • pidav.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    847b4c077fe610bfa5e095226c5e934a


    Headers

    Imports

    Exports

    Sections

  • piorg.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    594b2ae8719a9f9a1dda6ab409827501


    Headers

    Imports

    Exports

    Sections

  • piorgres.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pisync.dll
    .dll windows:5 windows x86 arch:x86

    9575b7b13a57bcca6b2f2aadb75d273b


    Headers

    Imports

    Exports

    Sections

  • pisynctw.exe
    .exe windows:5 windows x86 arch:x86

    c7dd1a2ec7eaf06dd125cf1aa1fceed0


    Headers

    Imports

    Sections

  • piview.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    9c319a3ef57a2d25ef6cd2046a069440


    Headers

    Imports

    Exports

    Sections

  • prgemp.gif
    .gif
  • prggrn.gif
    .gif
  • slides~1.js
    .js
  • slides~1.xml
  • splash.gif
    .gif
  • startup.js
    .js
  • unicows.dll
    .dll windows:6 windows x86 arch:x86

    785d5607ed2f18f4ea0be5809350b169


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • viewer.htm
    .html .vbs polyglot