Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

is155016.exe

windows7-x64

3

is155016.exe

windows10-2004-x64

3

setup_akl.exe

windows7-x64

10

setup_akl.exe

windows10-2004-x64

10

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

AKV.exe

windows7-x64

3

AKV.exe

windows10-2004-x64

3

HTV.dll

windows7-x64

3

HTV.dll

windows10-2004-x64

3

HTV.exe

windows7-x64

6

HTV.exe

windows10-2004-x64

6

HTV.dll

windows7-x64

3

HTV.dll

windows10-2004-x64

3

HTV.dll

windows7-x64

3

HTV.dll

windows10-2004-x64

3

HTV.chm

windows7-x64

1

HTV.chm

windows10-2004-x64

1

HTV.exe

windows7-x64

6

HTV.exe

windows10-2004-x64

6

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

qs.html

windows7-x64

3

qs.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7d0586a51e7d29f77e75dc831a150bfa

  • Size

    487KB

  • MD5

    7d0586a51e7d29f77e75dc831a150bfa

  • SHA1

    db55333f109056e00fa60ca6e1094b6b11278c2f

  • SHA256

    49cf9b024465dcbe2b3c77374895d1c715f9ea53d46f8e4b2104ee245e01d706

  • SHA512

    42924c8a624de73909175b4cc6ee8e46a0ec3625f0a445f95da16e5a64810589b4c99c32bab6c45a6963072463e2e467e448eb260cd609a005105c90ac5c4091

  • SSDEEP

    12288:gTRz+RidaaKbBEoUVSvVDyz1SQdLzt03nxaMQ6:gTgcaaKbBMAZI1SgUnxaX6

Score
10/10
ardamax

Malware Config

Signatures

  • Ardamax family
    ardamax
  • Ardamax main executable 1 IoCs
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • JaffaCakes118_7d0586a51e7d29f77e75dc831a150bfa
    .cab
  • is155016.exe
    .exe windows:4 windows x86 arch:x86

    0b0dd23e909dfb9249804d10e836b037


    Headers

    Imports

    Sections

  • setup_akl.exe
    .exe windows:4 windows x86 arch:x86

    b2a0d9368ec1be7deb968a920e5c993e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • AKV.exe
    .exe windows:4 windows x86 arch:x86

    a2f82bef64ddff8e99050308fc76380e


    Headers

    Imports

    Sections

  • HTV.003
    .dll windows:4 windows x86 arch:x86

    7538179af5f471b14303746be79de809


    Headers

    Imports

    Exports

    Sections

  • HTV.004
    .exe windows:4 windows x86 arch:x86

    86632da30434ccfc050190a47fb559c4


    Headers

    Imports

    Sections

  • HTV.006
    .dll windows:4 windows x86 arch:x86

    56a0310cc21e13f1fbc0b10b145ff8ee


    Headers

    Imports

    Exports

    Sections

  • HTV.007
    .dll windows:4 windows x86 arch:x86

    a2ed420e4430c2ef22cb11008c100339


    Headers

    Imports

    Exports

    Sections

  • HTV.chm
    .chm
  • HTV.exe
    .exe windows:4 windows x86 arch:x86

    f540a07307a950dc21e42040216c83fb


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b2a0d9368ec1be7deb968a920e5c993e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • menu.gif
    .gif
  • qs.html
    .html
  • tray.gif
    .gif