Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
33a116b2c61...18.exe
windows7-x64
73a116b2c61...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...lp.dll
windows7-x64
1$PLUGINSDI...lp.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3IA2Marshal.dll
windows7-x64
1IA2Marshal.dll
windows10-2004-x64
1Interop.Shell32.dll
windows7-x64
1Interop.Shell32.dll
windows10-2004-x64
1Skybound.Gecko.dll
windows7-x64
1Skybound.Gecko.dll
windows10-2004-x64
1WallpaperMakerApp.exe
windows7-x64
1WallpaperMakerApp.exe
windows10-2004-x64
6content/co...log.js
windows7-x64
3content/co...log.js
windows10-2004-x64
3content/pi...ger.js
windows7-x64
3content/pi...ger.js
windows10-2004-x64
3content/pi...ror.js
windows7-x64
3content/pi...ror.js
windows10-2004-x64
3content/pi...ker.js
windows7-x64
3content/pi...ker.js
windows10-2004-x64
3General
-
Target
3a116b2c6122cd589c81807d8bdfb31d_JaffaCakes118
-
Size
9.2MB
-
Sample
240512-pfybmaee3t
-
MD5
3a116b2c6122cd589c81807d8bdfb31d
-
SHA1
f610dd1200ff9f046089afbd2389ae021a065ff7
-
SHA256
0f95960120449aeba54a96103c366bfa8d922bc2fe72cbe0ff3565ec3ae03d42
-
SHA512
f400f56f634f73a6bf71d2b2843f6f6789957aa9cced19a50eb1fd31e74d30ed06b5fb456ba1027a13eeca8eea0496766f53cb1bccdd4a87c97c747ae314eb53
-
SSDEEP
196608:HqdJdKoAfY5L7qW+Fh+8DVax6d3cMPOQ1MSefdFO6ue4Ckk97e88VU0HYEKXk:CGYsv+8pI6dsB8MXFVHkFVU0Hv1
Static task
static1
Behavioral task
behavioral1
Sample
3a116b2c6122cd589c81807d8bdfb31d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a116b2c6122cd589c81807d8bdfb31d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
IA2Marshal.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
IA2Marshal.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
Interop.Shell32.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
Interop.Shell32.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Skybound.Gecko.dll
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
Skybound.Gecko.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
WallpaperMakerApp.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
WallpaperMakerApp.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
content/cookie/cookieAcceptDialog.js
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
content/cookie/cookieAcceptDialog.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
content/pippki/certManager.js
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
content/pippki/certManager.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
content/pippki/certerror.js
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
content/pippki/certerror.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
content/pippki/certpicker.js
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
content/pippki/certpicker.js
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
3a116b2c6122cd589c81807d8bdfb31d_JaffaCakes118
-
Size
9.2MB
-
MD5
3a116b2c6122cd589c81807d8bdfb31d
-
SHA1
f610dd1200ff9f046089afbd2389ae021a065ff7
-
SHA256
0f95960120449aeba54a96103c366bfa8d922bc2fe72cbe0ff3565ec3ae03d42
-
SHA512
f400f56f634f73a6bf71d2b2843f6f6789957aa9cced19a50eb1fd31e74d30ed06b5fb456ba1027a13eeca8eea0496766f53cb1bccdd4a87c97c747ae314eb53
-
SSDEEP
196608:HqdJdKoAfY5L7qW+Fh+8DVax6d3cMPOQ1MSefdFO6ue4Ckk97e88VU0HYEKXk:CGYsv+8pI6dsB8MXFVHkFVU0Hv1
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
325b008aec81e5aaa57096f05d4212b5
-
SHA1
27a2d89747a20305b6518438eff5b9f57f7df5c3
-
SHA256
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
-
SHA512
18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
-
SSDEEP
192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/LangDLL.dll
-
Size
5KB
-
MD5
9384f4007c492d4fa040924f31c00166
-
SHA1
aba37faef30d7c445584c688a0b5638f5db31c7b
-
SHA256
60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
-
SHA512
68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
-
SSDEEP
48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/OCSetupHlp.dll
-
Size
763KB
-
MD5
7c6b0d9fe494f9ce92b12d1877cc7efe
-
SHA1
4f82a3193c133743f71c4bf02de39cd79aeb64c8
-
SHA256
1e9e818060df428c457b4d04962bc1cbdc942e8c17d55d453ab2e9f47b59b8f4
-
SHA512
a8e410a39ba6f75e69e68662c81a040f215dfed976f6c0b6da070078d863df57fbd6aa8af9a7424fd3330d0980af308fd389438409cfb44f80a2fc013dcf209b
-
SSDEEP
12288:LEf6X+0AsJFFq1TdYg1g2swfkhxyiRfTrKTpolJnK3WK:QA3JFFeTdYg1g2sxyiRfqTpoHK3WK
Score1/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/UserInfo.dll
-
Size
4KB
-
MD5
7579ade7ae1747a31960a228ce02e666
-
SHA1
8ec8571a296737e819dcf86353a43fcf8ec63351
-
SHA256
564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
-
SHA512
a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
IA2Marshal.dll
-
Size
23KB
-
MD5
d7a8d54446d61432edd4a12a0a98ac5f
-
SHA1
a3497a6e70d59a311f81771a7143a5ae9245d5f7
-
SHA256
17dd0bad9ab96d7a2ca4b5d384c88cbabdc0cceab812b2f4eb5e62644ab6a6cf
-
SHA512
7488a75307f0f260ea6470f9539fffdbc6eacdb967ece8e1bdedb39e1e44b4b5a3dd9f05387f737da93f7e4fa48b28d015c8160ef98ac298a3177bf085631934
-
SSDEEP
384:JpWYarFTQ4nziIIKbTQ4n3fPvAdZwSy4:Jn4zNdg43PAXy
Score1/10 -
-
-
Target
Interop.Shell32.dll
-
Size
52KB
-
MD5
14eef63eb39f08138112d71cada6491a
-
SHA1
227eccc2f83b3563089e49f8b35ee8baaea0a788
-
SHA256
81ff794278c48da82360a4078b4f1ea9b1dd60ea3a9fa0bddbf63ced9e8a3108
-
SHA512
308f8fe4c8535bf514f104041e65d7dd4060f410e418e3d84364b27cfb3bc6badfab5d99bcacf23194b1bad3ab2a791f32e31ca0a6a524316abd6bd673e45675
-
SSDEEP
768:TExGbYVMM7G1CRD3HqyZhi9nwCquybCsG1/st+UyF6j7tr+BdS6kX:TExGbYVMM7G1CRLNuwCqrbCTzj6
Score1/10 -
-
-
Target
Skybound.Gecko.dll
-
Size
176KB
-
MD5
9474404c6f530a5ee95367711061accc
-
SHA1
f7b16468728769708e4c45380ccfb0d8414ac679
-
SHA256
b1330c83e87c3a7514f3fba3a210d52e7362b9647317fb15b019394cee17a0e9
-
SHA512
165a8009c63486b7932a137dc9e6ae512676be53664317ca6f42204a24cac35a5c3e9f4c33a06a794d1d13a98259be85f47fdc2c666081022d2f7daf685d6444
-
SSDEEP
3072:w7+K1snsssliZGrdpYovc2PNMY0LJMDV:w7+KanHsU2nQK
Score1/10 -
-
-
Target
WallpaperMakerApp.exe
-
Size
508KB
-
MD5
a404f73eb5dc271f6a7ee6e040a70336
-
SHA1
805653284804b80a61d552e8ce68789b09645081
-
SHA256
1be7904fdd826733e01e7ac2785d2ecb195d467a4e4ebce6bbcfedb0e0761fdb
-
SHA512
1bf295566612bee2f66df744ea27e8cd4e0ec1a5a3b8b078497b86cab04dc5e227c1c707eeda2a625b70230d4cfa5b7f1cdd3b2ec487f47039c5e819163cd5fe
-
SSDEEP
6144:3lTMgYkkBQAzUCJwYVwzInODD0nRSq7FkLgdbFuBv485VaIOV/uzus:3lTXYf+mTtkwOH0RpbFu6rs
Score6/10-
Drops desktop.ini file(s)
-
-
-
Target
content/cookie/cookieAcceptDialog.js
-
Size
8KB
-
MD5
5e520e8e861a511fe991ab9a4c2dcc23
-
SHA1
09dd07b49dc063bfc34c33a7a80b8f3693f6833e
-
SHA256
a70902218de47dfdbfd7e4dc2d0e731e2c9f3eb5d89513cbbcf7fbf86b446c85
-
SHA512
2a4be8d4bc91be0d59babc2e7deb74f02ed3c6c2bba1ae817e124bff0e61c4752d62ec0c90c13eca12b69b0329248e470f4267d30f17d65beb91ab1ed5f8bd1e
-
SSDEEP
192:BsMfPPztYqZnREGd/CoLw3dKVPOWWyP9hE1dy5u4zQDK:WMtREsjOkBP9hEBbK
Score3/10 -
-
-
Target
content/pippki/certManager.js
-
Size
21KB
-
MD5
9df5c79bc1770ad4b6974da33326125e
-
SHA1
b9b64f7bbc5c3df3fe43349fe5c75e86445858bb
-
SHA256
d90d3b66452d7561db05ff29fb361744ca4826e965f3228f38eca172641fb671
-
SHA512
3a422af815628d58effac1c8a061d948858e7fc747e3e12cde2127e0519889476187457a9e6d61e248833c2bc9b560b40aa2b3c0d618f0bef1b74d2b96eacd98
-
SSDEEP
384:L9yu2MF/20bm+WDFVes8CSDLrkQKQ0Q1QsQsQpQ5h1bD4V5S:L9yuX/vbm+6FVes8CSDL3ZbOTTCdbD4m
Score3/10 -
-
-
Target
content/pippki/certerror.js
-
Size
787B
-
MD5
51dd4b7b7d6f0e4d726579cd5bec7f67
-
SHA1
1d28dbe2008e46388432af3f78bbfe3585fc5715
-
SHA256
82bb752ad8f84a698b7451f7c958d1ffa62ebc3a8d1c971113613606bf3ec25f
-
SHA512
5bb2db05dc94b14dfa51753fa3a9170951e8e56d4d07eff922bcfef91b3df4623524cd26fa820c47c06ea33c3f6a50851ed8f0006054a05d4ee9a49260290254
Score3/10 -
-
-
Target
content/pippki/certpicker.js
-
Size
3KB
-
MD5
4b4491fa8497c594eb9468b19b9fda6e
-
SHA1
98578c8abd7630df2586e0d49b39abb946538b68
-
SHA256
dd10f7d81d6ef48e3347d893bf1f3427df4acd84add4f15b1ab9c155c6b481a8
-
SHA512
571b2defc7c8ffa268d95498285591ec5250a96ab68655c270e9b1bcc79182afd7115deeda2e68e351f401e91887eb7b1630683489ffd2fd1115142963ece6aa
Score3/10 -