Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
726b4243db4...18.exe
windows7-x64
726b4243db4...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMP/ApnIC.dll
windows7-x64
8$TEMP/ApnIC.dll
windows10-2004-x64
7$TEMP/ApnStub.exe
windows7-x64
1$TEMP/ApnStub.exe
windows10-2004-x64
1$TEMP/ApnT...er.exe
windows7-x64
1$TEMP/ApnT...er.exe
windows10-2004-x64
1ImgBurn.exe
windows7-x64
7ImgBurn.exe
windows10-2004-x64
7ImgBurnPreview.exe
windows7-x64
7ImgBurnPreview.exe
windows10-2004-x64
7uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
04/07/2024, 23:52
Behavioral task
behavioral1
Sample
26b4243db442d797e817c44953544e55_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26b4243db442d797e817c44953544e55_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
$TEMP/ApnIC.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
$TEMP/ApnIC.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$TEMP/ApnStub.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$TEMP/ApnStub.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
$TEMP/ApnToolbarInstaller.exe
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
$TEMP/ApnToolbarInstaller.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
ImgBurn.exe
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
ImgBurn.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
ImgBurnPreview.exe
Resource
win7-20240419-en
Behavioral task
behavioral20
Sample
ImgBurnPreview.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
uninstall.exe
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
uninstall.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240704-en
General
-
Target
ImgBurnPreview.exe
-
Size
209KB
-
MD5
c767843e49d828930ac7b9c36cd047f6
-
SHA1
bd721b718056825df692046a5259624da4d638d1
-
SHA256
6d83891fb8430d642582ba7bde76fc433266ebe6327ec9a43ee2101f0fd79706
-
SHA512
96a78312bf96ce3f64d8d89f84dddc70edd12399877e4c74ca0c02418a8944d66ea7bd11a76d13ef693733d7ccb5e08165be74db5a847d5cdb359b8a273eb174
-
SSDEEP
3072:vm1BzKL2lZ33qxjrzVcol6gUjywWHlGvakyvVuk2AQ4w/vvoutc:uLzL33qxjWoG19xCuzAQn/XoS
Malware Config
Signatures
-
resource yara_rule behavioral20/memory/2196-0-0x0000000000400000-0x000000000077F000-memory.dmp upx behavioral20/memory/2196-1-0x0000000000400000-0x000000000077F000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2196 ImgBurnPreview.exe 2196 ImgBurnPreview.exe