Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
311e12e0c4d...18.exe
windows7-x64
711e12e0c4d...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nk.dll
windows7-x64
3$PLUGINSDI...nk.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3GoogleTranslator.dll
windows7-x64
1GoogleTranslator.dll
windows10-2004-x64
1ShaPlus Tr...or.exe
windows7-x64
3ShaPlus Tr...or.exe
windows10-2004-x64
1help.chm
windows7-x64
1help.chm
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7Analysis
-
max time kernel
134s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
04/05/2024, 08:24
Static task
static1
Behavioral task
behavioral1
Sample
11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/ShellLink.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ShellLink.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
GoogleTranslator.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
GoogleTranslator.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
ShaPlus Translator.exe
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
ShaPlus Translator.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
help.chm
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
help.chm
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
uninst.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
uninst.exe
Resource
win10v2004-20240419-en
General
-
Target
ShaPlus Translator.exe
-
Size
92KB
-
MD5
22af67256b8aa0482fd211f53d876975
-
SHA1
33608502445dfe96e49d1b430372364530a6eba5
-
SHA256
f12101a956d6b1a7b166299b56409367de899853a774381c5753d89abe51456e
-
SHA512
38a518b94af76afbf1058447eb60e43693c6ea403e6f3ec68ebf7dcfda662aa371633cb2e31878ab822281f551b81f280ed9e1ead781e8dbf1c3397bd4d57173
-
SSDEEP
1536:bUMqMZ8fDdAyYm7UPXCB3srj50Uy8UUo5dl5/gEpknzfmlbbc7v/OuuL:bSFDdxQXU3sP50L8UazfmBI7v/z0
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3164 ShaPlus Translator.exe 3164 ShaPlus Translator.exe 3164 ShaPlus Translator.exe 3164 ShaPlus Translator.exe