Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_270248e6a629a7d47374cf2c8a172000ca6790c7ab7e90eac0fdbac902122958

  • Size

    5.8MB

  • MD5

    9cee3ed351f503d03da28319d1a9acf6

  • SHA1

    58806175875390a446c1366512e0680711dee087

  • SHA256

    270248e6a629a7d47374cf2c8a172000ca6790c7ab7e90eac0fdbac902122958

  • SHA512

    ecdabad137321d2860b9d76c3ceef11b758f6d196c0b55c21735e5d9bbcfe49f63f07c325e18c1a723f6aac09145cb6f7347960c7d842fe331c4f289792550b8

  • SSDEEP

    98304:/o7ykqZ9PnFMEbnecNecNecNecDecKeczecXecxecmecgnecdec0eck9ecjMQecr:/1kutnOYnecNecNecNecDecKeczecXe8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_270248e6a629a7d47374cf2c8a172000ca6790c7ab7e90eac0fdbac902122958
    .zip
  • MsiZap.exe
    .exe windows:5 windows x86 arch:x86

    71439615f782da28b313eece8b020d7e


    Headers

    Imports

    Sections

  • adfind.exe
    .exe windows:6 windows x86 arch:x86

    bca5675746d13a1f246e2da3c2217492


    Headers

    Imports

    Sections

  • croperdate.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    404e60e1ae3fa5a8516183e3655abd0c


    Headers

    Imports

    Exports

    Sections

  • croperdate.exe
    .exe windows:6 windows x86 arch:x86

    3b06bdb2bd9c293b03f5f6895108a59f


    Headers

    Imports

    Sections

  • croperdate64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    a21f516b5754f8d581a9d694744c3eb1


    Headers

    Imports

    Exports

    Sections

  • doc_main_0.docx
    .docx office2007
  • doc_main_1.docx
    .docx office2007
  • doc_main_10.docx
    .docx office2007
  • doc_main_11.docx
    .docx office2007
  • doc_main_12.docx
    .docx office2007
  • doc_main_13.docx
    .docx office2007
  • doc_main_14.docx
    .docx office2007
  • doc_main_15.docx
    .docx office2007
  • doc_main_16.docx
    .docx office2007
  • doc_main_17.docx
    .docx office2007
  • doc_main_18.docx
    .docx office2007
  • doc_main_19.docx
    .docx office2007
  • doc_main_2.docx
    .docx office2007
  • doc_main_20.docx
    .docx office2007
  • doc_main_21.docx
    .docx office2007
  • doc_main_22.docx
    .docx office2007
  • doc_main_23.docx
    .docx office2007
  • doc_main_24.docx
    .docx office2007
  • doc_main_25.docx
    .docx office2007
  • doc_main_26.docx
    .docx office2007
  • doc_main_28.docx
    .docx office2007
  • doc_main_29.docx
    .docx office2007
  • doc_main_3.docx
    .docx office2007
  • doc_main_30.docx
    .docx office2007
  • doc_main_31.docx
    .docx office2007
  • doc_main_32.docx
    .docx office2007
  • doc_main_4.docx
    .docx office2007
  • doc_main_5.docx
    .docx office2007
  • doc_main_6.docx
    .docx office2007
  • doc_main_7.docx
    .docx office2007
  • doc_main_8.docx
    .docx office2007
  • doc_main_9.docx
    .docx office2007
  • e.bat
  • e2.bat
  • e3.bat
  • e4.bat
  • e5.bat
  • e6.bat
  • eset.bat
  • fed1.bat
  • fed2.bat
  • fed3.bat
  • http.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    404e60e1ae3fa5a8516183e3655abd0c


    Headers

    Imports

    Exports

    Sections

  • kas.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    f7a59d112469e74fcec83c0c24f033f9


    Headers

    Imports

    Exports

    Sections

  • kas64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    2869cb885758b15d003acb119f131468


    Headers

    Imports

    Exports

    Sections

  • kaslose.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    404e60e1ae3fa5a8516183e3655abd0c


    Headers

    Imports

    Exports

    Sections

  • kaslose.exe
    .exe windows:6 windows x86 arch:x86

    3b06bdb2bd9c293b03f5f6895108a59f


    Headers

    Imports

    Sections

  • kaslose64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    a21f516b5754f8d581a9d694744c3eb1


    Headers

    Imports

    Exports

    Sections

  • kaslose64.exe
    .exe windows:6 windows x64 arch:x64

    961ddf9e7e58d7f5a12b18942e3a8a2b


    Headers

    Imports

    Sections

  • kaslosehttp.exe
    .exe windows:6 windows x86 arch:x86

    3b06bdb2bd9c293b03f5f6895108a59f


    Headers

    Imports

    Sections

  • kasper.bat
  • kasperV2.bat
  • kes.bat
  • powershellon.bat
  • pse.exe
    .exe windows:5 windows x86 arch:x86

    c1e59519b5e5d84af07afa6f5a8625f1


    Code Sign

    Headers

    Imports

    Sections

  • rdp.bat
  • sima.bat
  • sintel.bat
  • sophos.bat
  • sophv1.bat
  • sophv2.bat
  • star.bat
  • stsophospc.bat
  • test.bat
  • trend.bat
  • trend8.bat