Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7f44b243799...18.exe
windows7-x64
7f44b243799...18.exe
windows10-2004-x64
7$TEMP/max9keygen.exe
windows7-x64
1$TEMP/max9keygen.exe
windows10-2004-x64
1$TEMP/svchost.exe
windows7-x64
7$TEMP/svchost.exe
windows10-2004-x64
7$PLUGINSDI...ay.dll
windows7-x64
3$PLUGINSDI...ay.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
7$PLUGINSDI...ll.dll
windows10-2004-x64
7$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3messenger.exe
windows7-x64
3messenger.exe
windows10-2004-x64
3$PLUGINSDI...ay.dll
windows7-x64
3$PLUGINSDI...ay.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
7$PLUGINSDI...ll.dll
windows10-2004-x64
7General
-
Target
f44b243799cc58c5a8a5098a50993b5b_JaffaCakes118
-
Size
322KB
-
Sample
240416-zkdg5adg5t
-
MD5
f44b243799cc58c5a8a5098a50993b5b
-
SHA1
024361d912ce8f6e24b0988d4bc6e522dba32770
-
SHA256
57d4f650bfce31b9ae59803b8eda8d31155ba36cab49e52c33078691bf9682a3
-
SHA512
ceae8a16fe35a6786d3b024b253b381c676099dba562c9ce90fdb8901ed50ac180e9d002a86812d08c0b8bcc7e5c715e4eff018bcc1f82bfbd14339cbf93a99d
-
SSDEEP
6144:S9k1/S4w8e34Pl7UyZtnl72LiMNCUyZtnDtm76xkv:ck1/SPiljtnl4igwtnDg76W
Behavioral task
behavioral1
Sample
f44b243799cc58c5a8a5098a50993b5b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f44b243799cc58c5a8a5098a50993b5b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
$TEMP/max9keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$TEMP/max9keygen.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$TEMP/svchost.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$TEMP/svchost.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/blowfish.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/blowfish.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/md5dll.dll
Resource
win7-20240319-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/md5dll.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
messenger.exe
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
messenger.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/blowfish.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/blowfish.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/md5dll.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/md5dll.dll
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
f44b243799cc58c5a8a5098a50993b5b_JaffaCakes118
-
Size
322KB
-
MD5
f44b243799cc58c5a8a5098a50993b5b
-
SHA1
024361d912ce8f6e24b0988d4bc6e522dba32770
-
SHA256
57d4f650bfce31b9ae59803b8eda8d31155ba36cab49e52c33078691bf9682a3
-
SHA512
ceae8a16fe35a6786d3b024b253b381c676099dba562c9ce90fdb8901ed50ac180e9d002a86812d08c0b8bcc7e5c715e4eff018bcc1f82bfbd14339cbf93a99d
-
SSDEEP
6144:S9k1/S4w8e34Pl7UyZtnl72LiMNCUyZtnDtm76xkv:ck1/SPiljtnl4igwtnDg76W
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
-
-
Target
$TEMP/max9keygen.exe
-
Size
92KB
-
MD5
236e0270cee6f33ffdfaf2489341521c
-
SHA1
9a3f590e2546a4322ab43c1b84a045733f9a7b43
-
SHA256
e7f4a36acfda6821b334e9148a83864b782a66d75d5a99f8a95163c5da5efabc
-
SHA512
0cf3d4ca86785f284c962392fbd691bfe95c11e1fcffb0f9fc1298780d5e947af2979aa4b64388bfedd8768fdf82720226dea1e93e2a73e1ff652f08f0473726
-
SSDEEP
1536:wNXsRJ7Znsvy6V5vyn+jPQ8QZ/LvltZ3X:cm7dsvx5a+SZ/LNtd
Score1/10 -
-
-
Target
$TEMP/svchost.exe
-
Size
168KB
-
MD5
a589909b706cb56ed100b34cd1eaba8f
-
SHA1
62f691d8ee9e68eb9ec4b1f5f81d2ac6d2329224
-
SHA256
53ad4387cc26ef8669004e1599b06a88218a47b8d627027466f73fb0aa891a88
-
SHA512
71df9e55e6eca7adea93abcc013ed1bd13e804cf54cb48f75da7ee162ad0331af7c86b658ed8a9f09b42ca55d14c29185ec8478424be31596c8a95fc8a268f31
-
SSDEEP
3072:wgXdZt9P6D3XJtlkFQP5Kyx3tnl7OlLaHyWS/17rC5Kyx3tnR:we34Pl7UyZtnl72LiMNCUyZtnR
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
-
-
Target
$PLUGINSDIR/NSISArray.dll
-
Size
19KB
-
MD5
14b848866035dea39b912da628307231
-
SHA1
d00c8963aee8038d8a22f098cef69b31007196e5
-
SHA256
6a129a9eefae85a9412e889e0c74fdaa21d20254fa13cacef5429885775017dc
-
SHA512
4538058426c742bf7d823d1cac5303eeff8bf0b524459262181ac79695eead705e7590ae63ce996b8e3afd9a6c8d1fec503f9a11772ebe5c5c4e01930ed97b16
-
SSDEEP
384:J+o6oNJDOD4mqjCQ2UcW3++Mnnm8GPHltUIH4qpjiX:gDoNJyD4mqjCOsnmtHltUIYqFi
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/blowfish.dll
-
Size
22KB
-
MD5
5afd4a9b7e69e7c6e312b2ce4040394a
-
SHA1
fbd07adb3f02f866dc3a327a86b0f319d4a94502
-
SHA256
053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae
-
SHA512
f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511
-
SSDEEP
384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub
Score3/10 -
-
-
Target
$PLUGINSDIR/md5dll.dll
-
Size
6KB
-
MD5
0745ff646f5af1f1cdd784c06f40fce9
-
SHA1
bf7eba06020d7154ce4e35f696bec6e6c966287f
-
SHA256
fbed2f1160469f42ce97c33ad558201b2b43e3020257f9b2259e3ce295317a70
-
SHA512
8d31627c719e788b5d0f5f34d4cb175989eaa35aa3335c98f2ba7902c8ae01b23de3ccb9c6eb95945f0b08ef74d456f9f22ca7539df303e1df3f6a7e67b358da
-
SSDEEP
96:GL2PcvGn5olZMTZxEp8agTsflVwn4GogZcko5N1ub:U2Pxn5UZMTZipyaw4ZkKP2
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
messenger.exe
-
Size
91KB
-
MD5
72a6d43a220aff3e2c3afc7ee86f5cad
-
SHA1
5869f365812f998a71b35a75cc6ac992d964c535
-
SHA256
2ab5a4918151220fe90dac7309173248d01cd3d2ab4dbe1712049588a0aa5cd8
-
SHA512
2057fceb499730dbdb5707505154180c41f0a8086ce1734f2da785a393a19875594065cdf823c0120314b924a1dd11b96195f068069e6b21f33ea74f59005767
-
SSDEEP
1536:PpgpHzb9dZVX9fHMvG0D3XJgulF47BLPkqIzjbanya/x6s+bMnG:xgXdZt9P6D3XJnlFQP5Kyx3tnG
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISArray.dll
-
Size
19KB
-
MD5
14b848866035dea39b912da628307231
-
SHA1
d00c8963aee8038d8a22f098cef69b31007196e5
-
SHA256
6a129a9eefae85a9412e889e0c74fdaa21d20254fa13cacef5429885775017dc
-
SHA512
4538058426c742bf7d823d1cac5303eeff8bf0b524459262181ac79695eead705e7590ae63ce996b8e3afd9a6c8d1fec503f9a11772ebe5c5c4e01930ed97b16
-
SSDEEP
384:J+o6oNJDOD4mqjCQ2UcW3++Mnnm8GPHltUIH4qpjiX:gDoNJyD4mqjCOsnmtHltUIYqFi
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/blowfish.dll
-
Size
22KB
-
MD5
5afd4a9b7e69e7c6e312b2ce4040394a
-
SHA1
fbd07adb3f02f866dc3a327a86b0f319d4a94502
-
SHA256
053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae
-
SHA512
f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511
-
SSDEEP
384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub
Score3/10 -
-
-
Target
$PLUGINSDIR/md5dll.dll
-
Size
6KB
-
MD5
0745ff646f5af1f1cdd784c06f40fce9
-
SHA1
bf7eba06020d7154ce4e35f696bec6e6c966287f
-
SHA256
fbed2f1160469f42ce97c33ad558201b2b43e3020257f9b2259e3ce295317a70
-
SHA512
8d31627c719e788b5d0f5f34d4cb175989eaa35aa3335c98f2ba7902c8ae01b23de3ccb9c6eb95945f0b08ef74d456f9f22ca7539df303e1df3f6a7e67b358da
-
SSDEEP
96:GL2PcvGn5olZMTZxEp8agTsflVwn4GogZcko5N1ub:U2Pxn5UZMTZipyaw4ZkKP2
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-