Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...ef.exe

windows7-x64

10

JaffaCakes...ef.exe

windows10-2004-x64

10

"AKL.dll

windows7-x64

3

"AKL.dll

windows10-2004-x64

3

"AKL.exe

windows7-x64

3

"AKL.exe

windows10-2004-x64

3

"AKL.dll

windows7-x64

3

"AKL.dll

windows10-2004-x64

3

"AKL.dll

windows7-x64

3

"AKL.dll

windows10-2004-x64

3

"AKL.chm

windows7-x64

1

"AKL.chm

windows10-2004-x64

1

"AKL.exe

windows7-x64

6

"AKL.exe

windows10-2004-x64

6

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

AKV.exe

windows7-x64

3

AKV.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

qs.html

windows7-x64

3

qs.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6e9fdbd85c3f5e072b9cbe6a5fe316ef

  • Size

    255KB

  • MD5

    6e9fdbd85c3f5e072b9cbe6a5fe316ef

  • SHA1

    231d7f60c403a39483731c76e1ad4f3e75dfde38

  • SHA256

    73f84fd9e2c75fa1296a1b2b1c2bbc70892acb2cfb33a3c372cf047d6e650d63

  • SHA512

    ad7164b14e12b822e9e784e1aaa7a0ea97e9076f321b735565f9a56cd882c6fc004c61b1297c20bd89b472718ca6ffc83577a2e79d3ce4467f4f26c2a22ff4e7

  • SSDEEP

    6144:DMrpk9YeqVCVyMRi8D6/MynywM29rAXIHDZOS0qPyKMo/S:D0EFYQyWtSfBZrLHVoQyKz/S

Score
10/10
ardamax

Malware Config

Signatures

  • Ardamax family
    ardamax
  • Ardamax main executable 1 IoCs
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • JaffaCakes118_6e9fdbd85c3f5e072b9cbe6a5fe316ef
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • "AKL.003"
    .dll windows:4 windows x86 arch:x86

    f489579d9b9724ad9821274abd4522b5


    Headers

    Imports

    Exports

    Sections

  • "AKL.004"
    .exe windows:4 windows x86 arch:x86

    62b28a28cdb8b00a787e93828984256b


    Headers

    Imports

    Sections

  • "AKL.006"
    .dll windows:4 windows x86 arch:x86

    18814eea765c85589c58b214e6f862ca


    Headers

    Imports

    Exports

    Sections

  • "AKL.007"
    .dll windows:4 windows x86 arch:x86

    18446acd4e90a854d080d435f0bcae9d


    Headers

    Imports

    Exports

    Sections

  • "AKL.chm"
    .chm
  • "AKL.exe"
    .exe windows:4 windows x86 arch:x86

    69131269bb957389913bd154c457447f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AKV.exe
    .exe windows:4 windows x86 arch:x86

    99cf0c5c7f2d9b1c4a7d396aecedefa1


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • license.txt
  • menu.gif
    .gif .ps1 polyglot
  • qs.html
    .html
  • tray.gif
    .gif