Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
37c351dbf29...18.exe
windows7-x64
77c351dbf29...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...se.rtf
windows7-x64
4$PLUGINSDI...se.rtf
windows10-2004-x64
1$PLUGINSDI...tn.dll
windows7-x64
3$PLUGINSDI...tn.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...oc.dll
windows7-x64
3$PLUGINSDI...oc.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$_47_/Web/error.html
windows7-x64
1$_47_/Web/error.html
windows10-2004-x64
1Accelerator.dll
windows7-x64
1Accelerator.dll
windows10-2004-x64
1Basicsurvey.exe
windows7-x64
1Basicsurvey.exe
windows10-2004-x64
1BoxDoctor.exe
windows7-x64
1BoxDoctor.exe
windows10-2004-x64
1MouseHook.dll
windows7-x64
1MouseHook.dll
windows10-2004-x64
1Socks.dll
windows7-x64
1Socks.dll
windows10-2004-x64
1gamebox.exe
windows7-x64
6gamebox.exe
windows10-2004-x64
6General
-
Target
7c351dbf294d5cd8f857e2b4e221d097_JaffaCakes118
-
Size
3.5MB
-
Sample
240528-jhdgcacd72
-
MD5
7c351dbf294d5cd8f857e2b4e221d097
-
SHA1
730b313820de60d5c33009d5d4ce39a94f80de5d
-
SHA256
d428e48a77074d621d8a375f6130e3d85b82097d6d0cc90b030557388bb9b313
-
SHA512
ead9f1a94c5c29ef7f1b57a495e5084ae7fc543c3f443d2f556b21affd04357a61be930f5c00137c7d0ce460a4b0a6b3c49fc68a8c0778af7aec42d605ed617d
-
SSDEEP
98304:CgzRkadMxzSucW3pYqtx68X+8KgOSVq9UpnB:Rua2dLcWSC68X+8KSQWnB
Static task
static1
Behavioral task
behavioral1
Sample
7c351dbf294d5cd8f857e2b4e221d097_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7c351dbf294d5cd8f857e2b4e221d097_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/License.rtf
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/License.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SkinBtn.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SkinBtn.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/SkinProgress.dll
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/SkinProgress.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/WndProc.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/WndProc.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
$_47_/Web/error.html
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$_47_/Web/error.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Accelerator.dll
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
Accelerator.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Basicsurvey.exe
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
Basicsurvey.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
BoxDoctor.exe
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
BoxDoctor.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
MouseHook.dll
Resource
win7-20240419-en
Behavioral task
behavioral28
Sample
MouseHook.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
Socks.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
Socks.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
gamebox.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
gamebox.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
7c351dbf294d5cd8f857e2b4e221d097_JaffaCakes118
-
Size
3.5MB
-
MD5
7c351dbf294d5cd8f857e2b4e221d097
-
SHA1
730b313820de60d5c33009d5d4ce39a94f80de5d
-
SHA256
d428e48a77074d621d8a375f6130e3d85b82097d6d0cc90b030557388bb9b313
-
SHA512
ead9f1a94c5c29ef7f1b57a495e5084ae7fc543c3f443d2f556b21affd04357a61be930f5c00137c7d0ce460a4b0a6b3c49fc68a8c0778af7aec42d605ed617d
-
SSDEEP
98304:CgzRkadMxzSucW3pYqtx68X+8KgOSVq9UpnB:Rua2dLcWSC68X+8KSQWnB
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/FindProcDLL.dll
-
Size
3KB
-
MD5
8614c450637267afacad1645e23ba24a
-
SHA1
e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2
-
SHA256
0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758
-
SHA512
af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b
Score3/10 -
-
-
Target
$PLUGINSDIR/KillProcDLL.dll
-
Size
4KB
-
MD5
99f345cf51b6c3c317d20a81acb11012
-
SHA1
b3d0355f527c536ea14a8ff51741c8739d66f727
-
SHA256
c2689ba1f66066afce85ca6457ecd36370be0fe351c58422e45efd0948655c93
-
SHA512
937aa75be84a74f2be3b54dc80fac02c17dad1915d924ef82ab354d2a49bc773ee6d801203c52686113783a7c7ea0e8ed8e673ba696d6d3212f7006e291ed2ef
Score3/10 -
-
-
Target
$PLUGINSDIR/License.rtf
-
Size
79KB
-
MD5
6b49cb824fc11edb01d0ee4dee1bd54a
-
SHA1
81291caac7aaad7a439b5f8564ca26b320732b03
-
SHA256
7d13c20e98677d3434ee1610b8f29d6b78b71026840d9434a298d8680ca649a6
-
SHA512
b06a655b590e5a201a394d7f982c02c515a741653f81cb28bbca5a20097e16f2f09a81aee1648a7b725cc584f04a77825e0c5b1b5bee578ca6a21ab0f4934a19
-
SSDEEP
768:iNt4l3sjvUxnJ4mbjWn9G6GXBKgGYUWwlC1xVbn:ngrQJn
Score4/10 -
-
-
Target
$PLUGINSDIR/SkinBtn.dll
-
Size
4KB
-
MD5
e4ec95271ff1bcebab49bdfed6817a22
-
SHA1
2c03e97f4773aea80ecdb98a1482e5896fe4677b
-
SHA256
ee1c06692a757473737b0ebdef16f77b63afac864d0890022d905e4873737dd6
-
SHA512
771a527133806307a1b17b7e956d6a3c16e9bc675bf084b43204ae784a057dac2726dbf90645692876043a4e7365ba8825c167621fde4760c79cd84679e2aa3d
-
SSDEEP
48:iIf3aEDfeWm8JHFQbUrUPJJDFoetaxn/pFW3GNivz187eqzI/kMr8oX0Zbj:lv9Dfw8DQbhD2iaxn/PHmiNI/dQFZH
Score3/10 -
-
-
Target
$PLUGINSDIR/SkinProgress.dll
-
Size
4KB
-
MD5
cc037c4703d3ec257efeef2ce0a1a20e
-
SHA1
b3d6cc8f687a31fb2c1a5921a38de9429af20502
-
SHA256
888b32ecbc37ce67d4edc28d894cba0a4f4e2488cfc2212d1af011bd0bfe97ff
-
SHA512
120bfa0a68775bef04c1863023b0e73a41982284fb36da7f497fbb7d5ed8631ad02fa09951424d339f6fefaa90a17c12f949dd68bb33bad64b1b7cace489d2a7
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/WndProc.dll
-
Size
3KB
-
MD5
f0cb331dd4bd92a6ebce45e7cd1cf5ef
-
SHA1
b66ea0c10b08750295f2dc7c170b370402393214
-
SHA256
e7b3115fa2ce4a8fa09beeefa4fb634a474197f38a2854ce9be60d0a26016458
-
SHA512
7c33418f39b91ae0d4cc8b560f516bac293593eef539832815028878c2058bf1691c2d767a039cf312989839071f2f6f0b6d9d59835acdfff6b448bf1ffea271
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$_47_/Web/error.html
-
Size
2KB
-
MD5
9085af5c4c8fc9fc7c83ff132daf4970
-
SHA1
b91dc15b71fb30e923761b89c6a9ef85635bcf2d
-
SHA256
7dce7e40633ab511ea62e62943c71981e5e91eeb21ca98a1bcf5338bd3ceb3b3
-
SHA512
8465e6d1c5cca1e690b4c3889ffee61d2816c6fe04771fab75c9a463f73cf9bb2ae3e0b47aff9b9e30173b2d25d52bb9c4ccaf9d380bcf5d78a6e039e873722c
Score1/10 -
-
-
Target
Accelerator.dll
-
Size
306KB
-
MD5
091f0da49c9fe3f5903fa46638017442
-
SHA1
2c3627308d0741f4c517fdadbd58bbb0398518ad
-
SHA256
34c5416f4261f76103722ee86b9dcadc7ebddb2b4ee1d49a7eca914c2b343141
-
SHA512
e651a615a714822e4f036ca6dc79bc6a01a023f681a825f8d35b0cdd5293f80d51eb41bf14ecfb59f49cdbd8867df8e784118e1a504eebf394ca25c7987a63bd
-
SSDEEP
6144:I2GMn+qaIrAf4pd3DecSGUHmJYSJuXEj0j888888888888W88888888888I:D3+yt8SYiuc0j888888888888W88888g
Score1/10 -
-
-
Target
Basicsurvey.exe
-
Size
657KB
-
MD5
3a6f0999f9d48800ae51684b67a7bf1f
-
SHA1
41e29f6d9b8f2a548d22ecada8bbfbb339e99abe
-
SHA256
610fb271047b033fbf80f86fccef6d8bcbb6b5e1665d4abf5152d304a8c30930
-
SHA512
84facb4080cc43f3ff602b05086c8ba10ed24f1d2a31715b3758ae65b117273ddcdc8a6cb046edcb08f102765e6e3d15479d893e18b60d8e7c410529a6f03df2
-
SSDEEP
12288:MjkYOQrDtxKJX7evc1lL+OeO+OeNhBBhhBBH2DC6OoB9kSxLRE3Qs4TttG6Hdja:MjdOctxKJX7eClnC6NBJxLReQsCxdja
Score1/10 -
-
-
Target
BoxDoctor.exe
-
Size
950KB
-
MD5
4e517eb448d0eb90949858b9a51d93cf
-
SHA1
172e64d01266d150cbeb2fa539139b292f6b7440
-
SHA256
aaf894f315b4174e53f8b33f252006c7858b30c5cb540bedb20f6e0a6607f668
-
SHA512
aa95e229bae9ee2ed1ec525ac066b7718e4aea62a39ff9ea3c94f707a19610379289847f344ab665518108925a6693f8786a8845d1a2cd3bafe86ed59cad6ab1
-
SSDEEP
12288:WaqzXH+jQZG/EzXH+jQZG/EzXH+jQZG/0:7QXH+kXH+kXH++
Score1/10 -
-
-
Target
MouseHook.dll
-
Size
31KB
-
MD5
6e8a92fb9e6b8d4704bf243863cda92e
-
SHA1
c49f199a5aafab151350dad9edc924814e0acc14
-
SHA256
f3b7306448359dd8414cbfe18a84265459eb40844821b662de6f3bf33f1de17a
-
SHA512
2e3363403852ad7d744acf10f428cef31752563a1119c4875d1e031e5d0dd627ecf5b28cb39f2787bcd3e8a4eb06f8bf78969a05cbb03224a12f86b97bd008dc
-
SSDEEP
768:WHr98zW8XvCBcaxCYpGai292OK6ojvuerP:WL98zW8fCWac82OK6olP
Score1/10 -
-
-
Target
Socks.dll
-
Size
962KB
-
MD5
2326441ad2ca40c4e0dbe0ad81203a22
-
SHA1
e4749d6495b818d8331c340cdf916c5e317d9b6f
-
SHA256
800e2542b33fb1e28b4308359a5176ea99be96d483ed84de6477bcaeaad77036
-
SHA512
832907b845b21fec015a7460e9bb94cb5fb5f04b7f09519a816d85b2b8bd7f3b7e80d1719717e8c0b3258433bcef5654b9b39f35bde7af800d5821e0f1925199
-
SSDEEP
12288:yOVW7eBdym2J0MuHEysIk8zTFHFI+OeO+OeNhBBhhBBowQAbkLOD1+N2/KJKrvV+:y+1kFInzTtFewrkOD1+2SJKrvRdhy
Score1/10 -
-
-
Target
gamebox.exe
-
Size
2.8MB
-
MD5
b165f9c47b5ce6d45bdf892a3bc1bdcc
-
SHA1
17c112a2267deb9e84dcd20c6d9cc5018073eb4f
-
SHA256
31b07b764a2990629b0072e8d5148cfb8f731a38a13477629994e41d881c2130
-
SHA512
32134928bf1a1ddf9a0b4fa9c80c9bb43d28921edb074653cdbd721f91eef28f03bd8f9aa508f97d9adfcdd5447cff9a60c232064e3fd4375bba6d9386f1f7bb
-
SSDEEP
49152:vRLoo8J+cSPDzOKjTrJM/I31lQND4Aml8bee5WmL7iTPDTNXH+Set69mzSed:vJV2+cSr6Kjq/IAND91Ce5vXeXH+Su
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-