Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

3a116b2c61...18.exe

windows7-x64

7

3a116b2c61...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...lp.dll

windows7-x64

1

$PLUGINSDI...lp.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

IA2Marshal.dll

windows7-x64

1

IA2Marshal.dll

windows10-2004-x64

1

Interop.Shell32.dll

windows7-x64

1

Interop.Shell32.dll

windows10-2004-x64

1

Skybound.Gecko.dll

windows7-x64

1

Skybound.Gecko.dll

windows10-2004-x64

1

WallpaperMakerApp.exe

windows7-x64

1

WallpaperMakerApp.exe

windows10-2004-x64

6

content/co...log.js

windows7-x64

3

content/co...log.js

windows10-2004-x64

3

content/pi...ger.js

windows7-x64

3

content/pi...ger.js

windows10-2004-x64

3

content/pi...ror.js

windows7-x64

3

content/pi...ror.js

windows10-2004-x64

3

content/pi...ker.js

windows7-x64

3

content/pi...ker.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a116b2c6122cd589c81807d8bdfb31d_JaffaCakes118

  • Size

    9.2MB

  • Sample

    240512-pfybmaee3t

  • MD5

    3a116b2c6122cd589c81807d8bdfb31d

  • SHA1

    f610dd1200ff9f046089afbd2389ae021a065ff7

  • SHA256

    0f95960120449aeba54a96103c366bfa8d922bc2fe72cbe0ff3565ec3ae03d42

  • SHA512

    f400f56f634f73a6bf71d2b2843f6f6789957aa9cced19a50eb1fd31e74d30ed06b5fb456ba1027a13eeca8eea0496766f53cb1bccdd4a87c97c747ae314eb53

  • SSDEEP

    196608:HqdJdKoAfY5L7qW+Fh+8DVax6d3cMPOQ1MSefdFO6ue4Ckk97e88VU0HYEKXk:CGYsv+8pI6dsB8MXFVHkFVU0Hv1

Score
7/10
execution

Malware Config

Targets

    • Target

      3a116b2c6122cd589c81807d8bdfb31d_JaffaCakes118

    • Size

      9.2MB

    • MD5

      3a116b2c6122cd589c81807d8bdfb31d

    • SHA1

      f610dd1200ff9f046089afbd2389ae021a065ff7

    • SHA256

      0f95960120449aeba54a96103c366bfa8d922bc2fe72cbe0ff3565ec3ae03d42

    • SHA512

      f400f56f634f73a6bf71d2b2843f6f6789957aa9cced19a50eb1fd31e74d30ed06b5fb456ba1027a13eeca8eea0496766f53cb1bccdd4a87c97c747ae314eb53

    • SSDEEP

      196608:HqdJdKoAfY5L7qW+Fh+8DVax6d3cMPOQ1MSefdFO6ue4Ckk97e88VU0HYEKXk:CGYsv+8pI6dsB8MXFVHkFVU0Hv1

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      9384f4007c492d4fa040924f31c00166

    • SHA1

      aba37faef30d7c445584c688a0b5638f5db31c7b

    • SHA256

      60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5

    • SHA512

      68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf

    • SSDEEP

      48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/OCSetupHlp.dll

    • Size

      763KB

    • MD5

      7c6b0d9fe494f9ce92b12d1877cc7efe

    • SHA1

      4f82a3193c133743f71c4bf02de39cd79aeb64c8

    • SHA256

      1e9e818060df428c457b4d04962bc1cbdc942e8c17d55d453ab2e9f47b59b8f4

    • SHA512

      a8e410a39ba6f75e69e68662c81a040f215dfed976f6c0b6da070078d863df57fbd6aa8af9a7424fd3330d0980af308fd389438409cfb44f80a2fc013dcf209b

    • SSDEEP

      12288:LEf6X+0AsJFFq1TdYg1g2swfkhxyiRfTrKTpolJnK3WK:QA3JFFeTdYg1g2sxyiRfqTpoHK3WK

    Score
    1/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      7579ade7ae1747a31960a228ce02e666

    • SHA1

      8ec8571a296737e819dcf86353a43fcf8ec63351

    • SHA256

      564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5

    • SHA512

      a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral15behavioral16

    • Target

      IA2Marshal.dll

    • Size

      23KB

    • MD5

      d7a8d54446d61432edd4a12a0a98ac5f

    • SHA1

      a3497a6e70d59a311f81771a7143a5ae9245d5f7

    • SHA256

      17dd0bad9ab96d7a2ca4b5d384c88cbabdc0cceab812b2f4eb5e62644ab6a6cf

    • SHA512

      7488a75307f0f260ea6470f9539fffdbc6eacdb967ece8e1bdedb39e1e44b4b5a3dd9f05387f737da93f7e4fa48b28d015c8160ef98ac298a3177bf085631934

    • SSDEEP

      384:JpWYarFTQ4nziIIKbTQ4n3fPvAdZwSy4:Jn4zNdg43PAXy

    Score
    1/10
    behavioral17behavioral18

    • Target

      Interop.Shell32.dll

    • Size

      52KB

    • MD5

      14eef63eb39f08138112d71cada6491a

    • SHA1

      227eccc2f83b3563089e49f8b35ee8baaea0a788

    • SHA256

      81ff794278c48da82360a4078b4f1ea9b1dd60ea3a9fa0bddbf63ced9e8a3108

    • SHA512

      308f8fe4c8535bf514f104041e65d7dd4060f410e418e3d84364b27cfb3bc6badfab5d99bcacf23194b1bad3ab2a791f32e31ca0a6a524316abd6bd673e45675

    • SSDEEP

      768:TExGbYVMM7G1CRD3HqyZhi9nwCquybCsG1/st+UyF6j7tr+BdS6kX:TExGbYVMM7G1CRLNuwCqrbCTzj6

    Score
    1/10
    behavioral19behavioral20

    • Target

      Skybound.Gecko.dll

    • Size

      176KB

    • MD5

      9474404c6f530a5ee95367711061accc

    • SHA1

      f7b16468728769708e4c45380ccfb0d8414ac679

    • SHA256

      b1330c83e87c3a7514f3fba3a210d52e7362b9647317fb15b019394cee17a0e9

    • SHA512

      165a8009c63486b7932a137dc9e6ae512676be53664317ca6f42204a24cac35a5c3e9f4c33a06a794d1d13a98259be85f47fdc2c666081022d2f7daf685d6444

    • SSDEEP

      3072:w7+K1snsssliZGrdpYovc2PNMY0LJMDV:w7+KanHsU2nQK

    Score
    1/10
    behavioral21behavioral22

    • Target

      WallpaperMakerApp.exe

    • Size

      508KB

    • MD5

      a404f73eb5dc271f6a7ee6e040a70336

    • SHA1

      805653284804b80a61d552e8ce68789b09645081

    • SHA256

      1be7904fdd826733e01e7ac2785d2ecb195d467a4e4ebce6bbcfedb0e0761fdb

    • SHA512

      1bf295566612bee2f66df744ea27e8cd4e0ec1a5a3b8b078497b86cab04dc5e227c1c707eeda2a625b70230d4cfa5b7f1cdd3b2ec487f47039c5e819163cd5fe

    • SSDEEP

      6144:3lTMgYkkBQAzUCJwYVwzInODD0nRSq7FkLgdbFuBv485VaIOV/uzus:3lTXYf+mTtkwOH0RpbFu6rs

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral23behavioral24

    • Target

      content/cookie/cookieAcceptDialog.js

    • Size

      8KB

    • MD5

      5e520e8e861a511fe991ab9a4c2dcc23

    • SHA1

      09dd07b49dc063bfc34c33a7a80b8f3693f6833e

    • SHA256

      a70902218de47dfdbfd7e4dc2d0e731e2c9f3eb5d89513cbbcf7fbf86b446c85

    • SHA512

      2a4be8d4bc91be0d59babc2e7deb74f02ed3c6c2bba1ae817e124bff0e61c4752d62ec0c90c13eca12b69b0329248e470f4267d30f17d65beb91ab1ed5f8bd1e

    • SSDEEP

      192:BsMfPPztYqZnREGd/CoLw3dKVPOWWyP9hE1dy5u4zQDK:WMtREsjOkBP9hEBbK

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      content/pippki/certManager.js

    • Size

      21KB

    • MD5

      9df5c79bc1770ad4b6974da33326125e

    • SHA1

      b9b64f7bbc5c3df3fe43349fe5c75e86445858bb

    • SHA256

      d90d3b66452d7561db05ff29fb361744ca4826e965f3228f38eca172641fb671

    • SHA512

      3a422af815628d58effac1c8a061d948858e7fc747e3e12cde2127e0519889476187457a9e6d61e248833c2bc9b560b40aa2b3c0d618f0bef1b74d2b96eacd98

    • SSDEEP

      384:L9yu2MF/20bm+WDFVes8CSDLrkQKQ0Q1QsQsQpQ5h1bD4V5S:L9yuX/vbm+6FVes8CSDL3ZbOTTCdbD4m

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      content/pippki/certerror.js

    • Size

      787B

    • MD5

      51dd4b7b7d6f0e4d726579cd5bec7f67

    • SHA1

      1d28dbe2008e46388432af3f78bbfe3585fc5715

    • SHA256

      82bb752ad8f84a698b7451f7c958d1ffa62ebc3a8d1c971113613606bf3ec25f

    • SHA512

      5bb2db05dc94b14dfa51753fa3a9170951e8e56d4d07eff922bcfef91b3df4623524cd26fa820c47c06ea33c3f6a50851ed8f0006054a05d4ee9a49260290254

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      content/pippki/certpicker.js

    • Size

      3KB

    • MD5

      4b4491fa8497c594eb9468b19b9fda6e

    • SHA1

      98578c8abd7630df2586e0d49b39abb946538b68

    • SHA256

      dd10f7d81d6ef48e3347d893bf1f3427df4acd84add4f15b1ab9c155c6b481a8

    • SHA512

      571b2defc7c8ffa268d95498285591ec5250a96ab68655c270e9b1bcc79182afd7115deeda2e68e351f401e91887eb7b1630683489ffd2fd1115142963ece6aa

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
7/10

behavioral2

Score
7/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
6/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10