Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...bb.exe

windows7-x64

10

JaffaCakes...bb.exe

windows10-2004-x64

10

is155016.exe

windows7-x64

3

is155016.exe

windows10-2004-x64

3

setup_akl.exe

windows7-x64

10

setup_akl.exe

windows10-2004-x64

10

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

AKV.exe

windows7-x64

3

AKV.exe

windows10-2004-x64

3

HTV.dll

windows7-x64

3

HTV.dll

windows10-2004-x64

3

HTV.exe

windows7-x64

6

HTV.exe

windows10-2004-x64

6

HTV.dll

windows7-x64

3

HTV.dll

windows10-2004-x64

3

HTV.dll

windows7-x64

3

HTV.dll

windows10-2004-x64

3

HTV.chm

windows7-x64

1

HTV.chm

windows10-2004-x64

1

HTV.exe

windows7-x64

6

HTV.exe

windows10-2004-x64

6

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

qs.html

windows7-x64

3

qs.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3580f87fe087994c3fb1f52353e8e9bb

  • Size

    555KB

  • MD5

    3580f87fe087994c3fb1f52353e8e9bb

  • SHA1

    b2b962df988b3cdeae1cd269a67d9ace46600efe

  • SHA256

    e4f51c8c20e4ce5304ec5e51b51743af1471bb99bd27ffd7581ae99d47d8416a

  • SHA512

    eb21b3a95075474b1095e10299a563b0f9e18e55a83b8e996e7874cb84f831e6e2fd6c844b45ddadfc6ac20734652a0082c94deae86bd0924b5495ac0e35ecfd

  • SSDEEP

    12288:MrPTRz+RidaaKbBEoUVSvVDyz1SQdLzt03nxaMQ:MDTgcaaKbBMAZI1SgUnxaX

Score
10/10
ardamax

Malware Config

Signatures

  • Ardamax family
    ardamax
  • Ardamax main executable 1 IoCs
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • JaffaCakes118_3580f87fe087994c3fb1f52353e8e9bb
    .exe windows:5 windows x86 arch:x86

    c63ba316533609531fac22f3877f847b


    Headers

    Imports

    Sections

  • is155016.exe
    .exe windows:4 windows x86 arch:x86

    0b0dd23e909dfb9249804d10e836b037


    Headers

    Imports

    Sections

  • setup_akl.exe
    .exe windows:4 windows x86 arch:x86

    b2a0d9368ec1be7deb968a920e5c993e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AKV.exe
    .exe windows:4 windows x86 arch:x86

    a2f82bef64ddff8e99050308fc76380e


    Headers

    Imports

    Sections

  • HTV.003
    .dll windows:4 windows x86 arch:x86

    7538179af5f471b14303746be79de809


    Headers

    Imports

    Exports

    Sections

  • HTV.004
    .exe windows:4 windows x86 arch:x86

    86632da30434ccfc050190a47fb559c4


    Headers

    Imports

    Sections

  • HTV.006
    .dll windows:4 windows x86 arch:x86

    56a0310cc21e13f1fbc0b10b145ff8ee


    Headers

    Imports

    Exports

    Sections

  • HTV.007
    .dll windows:4 windows x86 arch:x86

    a2ed420e4430c2ef22cb11008c100339


    Headers

    Imports

    Exports

    Sections

  • HTV.chm
    .chm
  • HTV.exe
    .exe windows:4 windows x86 arch:x86

    f540a07307a950dc21e42040216c83fb


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b2a0d9368ec1be7deb968a920e5c993e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • menu.gif
    .gif
  • qs.html
    .html
  • tray.gif
    .gif