Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
30e51912989...18.exe
windows7-x64
70e51912989...18.exe
windows10-2004-x64
7$PLUGINSDI...SC.dll
windows7-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDIR/nsURL.dll
windows7-x64
3$PLUGINSDIR/nsURL.dll
windows10-2004-x64
3$PLUGINSDI...ry.dll
windows7-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3$PLUGINSDIR/utils.dll
windows7-x64
3$PLUGINSDIR/utils.dll
windows10-2004-x64
3$_52_/Plug...ct.exe
windows7-x64
1$_52_/Plug...ct.exe
windows10-2004-x64
1General
-
Target
0e51912989e3831ccd201c1c1bf5ffc5_JaffaCakes118
-
Size
1.1MB
-
Sample
240502-m6zw2ahe98
-
MD5
0e51912989e3831ccd201c1c1bf5ffc5
-
SHA1
d342cf8dd2382195f1e76491074fa748cda3dfc2
-
SHA256
bf0251e3e76a263068db92373e19bd646c695f75f5100799c569c76dd92c0c8b
-
SHA512
e4a85524f9afbbbb7f06dcddff648641dd40667823d1f2ab14cbece7b344e1fa843ad120fac7af3b3f1d5506334b9a9dca3755fe0d31f0aa58396e75999f4d7e
-
SSDEEP
24576:XZfAw3bLCl2wbReC0GTezBMOQtBosaPJZEz+f6c5xlgHbX:9Hb+lJbRvPTmxQtTaPJZESVlmbX
Static task
static1
Behavioral task
behavioral1
Sample
0e51912989e3831ccd201c1c1bf5ffc5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e51912989e3831ccd201c1c1bf5ffc5_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsURL.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsURL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/registry.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/registry.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/utils.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/utils.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
$_52_/PluginProtect.exe
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
$_52_/PluginProtect.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
0e51912989e3831ccd201c1c1bf5ffc5_JaffaCakes118
-
Size
1.1MB
-
MD5
0e51912989e3831ccd201c1c1bf5ffc5
-
SHA1
d342cf8dd2382195f1e76491074fa748cda3dfc2
-
SHA256
bf0251e3e76a263068db92373e19bd646c695f75f5100799c569c76dd92c0c8b
-
SHA512
e4a85524f9afbbbb7f06dcddff648641dd40667823d1f2ab14cbece7b344e1fa843ad120fac7af3b3f1d5506334b9a9dca3755fe0d31f0aa58396e75999f4d7e
-
SSDEEP
24576:XZfAw3bLCl2wbReC0GTezBMOQtBosaPJZEz+f6c5xlgHbX:9Hb+lJbRvPTmxQtTaPJZESVlmbX
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/SimpleSC.dll
-
Size
61KB
-
MD5
d63975ce28f801f236c4aca5af726961
-
SHA1
3d93ad9816d3b3dba1e63dfcbfa3bd05f787a8c9
-
SHA256
e0c580bbe48a483075c21277c6e0f23f3cbd6ce3eb2ccd3bf48cf68f05628f43
-
SHA512
8357e1955560bf0c42a8f4091550c87c19b4939bf1e6a53a54173d1c163b133b9c517014af6f7614eddc0c9bbf93b3b987c4977b024b10b05b3dc4eb20141810
-
SSDEEP
1536:i/qXv1si+Xsp9MNptZ8KMT6+nMA4fx+kmA:Bv1EXZnLMT5M3x+km
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
20KB
-
MD5
e541458cfe66ef95ffbea40eaaa07289
-
SHA1
caec1233f841ee72004231a3027b13cdeb13274c
-
SHA256
3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
-
SHA512
0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
-
SSDEEP
384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
Score3/10 -
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
6KB
-
MD5
acc2b699edfea5bf5aae45aba3a41e96
-
SHA1
d2accf4d494e43ceb2cff69abe4dd17147d29cc2
-
SHA256
168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
-
SHA512
e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
-
SSDEEP
96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
Score3/10 -
-
-
Target
$PLUGINSDIR/nsURL.dll
-
Size
276KB
-
MD5
00041c73dc322c96c1a128883ee2e249
-
SHA1
c13f7beb0a7c8da10d2e624fea642909d0fb15aa
-
SHA256
24d6944b630376e25cba2ff64b007d37b519699d18d77e0f01412c7d3a9aa9bf
-
SHA512
fe3e7cc71a8f2b74b7ed311ee138b1d3f2ac5c60bc6a647bee515ec9ee9f9ae635d1431dc5b963ffffaf8c54d70ee99c47a162f70aa14e45cd62f1cecabd8af7
-
SSDEEP
3072:oEAnycL2sxEpaZMpJuJKV4j/ILvJAL4+y4FUYcexRbO4/Fg:oEAycL/xTMewsMgykP
Score3/10 -
-
-
Target
$PLUGINSDIR/registry.dll
-
Size
24KB
-
MD5
2b7007ed0262ca02ef69d8990815cbeb
-
SHA1
2eabe4f755213666dbbbde024a5235ddde02b47f
-
SHA256
0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
-
SHA512
aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca
-
SSDEEP
384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA
Score3/10 -
-
-
Target
$PLUGINSDIR/utils.dll
-
Size
167KB
-
MD5
49bbea53054a3e53a8f24fd7ab97be44
-
SHA1
7ab42d62efb2d56ce6fab5e37aaf4478ae428daf
-
SHA256
fd162cc491484bb0009afe40dcef245bb7802af5b63b9c1ca12e2f22fed31341
-
SHA512
6baaa63910bdc93717556ed3f9f1fca9743488f1e1d7a5005ba3dbe44dce800019658556d7f3518e758ba18ab653d351bba6bbfb5c92f8c6b21fc2fc0a20cf7e
-
SSDEEP
3072:/hbRMt+IFCbuJOQXNkZ0HSoNRMJIIgk12c4eS2O43dhuZujYTu80l:5b+tuKS0HtM8kNO2ndIZuUTQl
Score3/10 -
-
-
Target
$_52_/PluginProtect.exe
-
Size
157KB
-
MD5
3f0a75bd23fb74186ce645d97d01f577
-
SHA1
ad77b3df2c224a3f886bbe4e37f510a87c7705ba
-
SHA256
4b1d909167c3a4f1624354c54ef3799b0365ab1df169b8d5ff5d312a60a9afe2
-
SHA512
52b2593df4c87530972a30896aa4151b53738d8ac8f1e5813db9d5851d57262d41f044eab21a498775662f3bea1c8e287d56714244ab791f170c7c5b75d7acc2
-
SSDEEP
3072:9AdHmSPRKz2kMW8aeaQNz6a2X6TRQUpV2:9AdGsRU9efz6a2
Score1/10 -