Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
724bd3998ed...18.exe
windows7-x64
724bd3998ed...18.exe
windows10-2004-x64
7$PLUGINSDI...os.dll
windows7-x64
3$PLUGINSDI...os.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMPImg/C...04.exe
windows7-x64
1$TEMPImg/C...04.exe
windows10-2004-x64
1$TEMPImg/regver.exe
windows7-x64
1$TEMPImg/regver.exe
windows10-2004-x64
1DataDiskDoctor.exe
windows7-x64
7DataDiskDoctor.exe
windows10-2004-x64
7Uninst.exe
windows7-x64
7Uninst.exe
windows10-2004-x64
7$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 05:09
Behavioral task
behavioral1
Sample
24bd3998edbc7549f50201cce7b9a11c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24bd3998edbc7549f50201cce7b9a11c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$TEMPImg/CheckVer104.exe
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
$TEMPImg/CheckVer104.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$TEMPImg/regver.exe
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
$TEMPImg/regver.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
DataDiskDoctor.exe
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
DataDiskDoctor.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Uninst.exe
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
Uninst.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240508-en
General
-
Target
$TEMPImg/CheckVer104.exe
-
Size
332KB
-
MD5
fa199dffc4991a36725e1a2d272e787e
-
SHA1
68c1db76a8080782e3f450e3f724e4e1564b18f6
-
SHA256
13c8453cb118d3f9d2dc2a1189633ab10162f902758320487f03daf124c4bb9e
-
SHA512
8dc6a2369dc87148ac45cd6ae37f33fcb32c4fd863d17f6166a41c7a4ef40edd6a4da0f57536f382e550add791bf678a5116e0f1cb440649be1b924c3a31a520
-
SSDEEP
6144:QL3Hu9I12R1kFFFFFFFFFFFIZyDayo59Xu7U5byhMkB9MIp+PGUk4F:Mc1kFFFFFFFFFFFIZ6o5RuA5uhMkBaIo
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2420 CheckVer104.exe 2420 CheckVer104.exe