Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
729718855a5...18.exe
windows7-x64
729718855a5...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Dll/Regdll.exe
windows7-x64
1Dll/Regdll.exe
windows10-2004-x64
1Dll/unRegdll.exe
windows7-x64
1Dll/unRegdll.exe
windows10-2004-x64
1Dll/web2pic_url.dll
windows7-x64
1Dll/web2pic_url.dll
windows10-2004-x64
1Help.chm
windows7-x64
1Help.chm
windows10-2004-x64
1Web2Pic_Pro.exe
windows7-x64
4Web2Pic_Pro.exe
windows10-2004-x64
4example.bat
windows7-x64
4example.bat
windows10-2004-x64
4uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
06/07/2024, 22:34
Behavioral task
behavioral1
Sample
29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
Dll/Regdll.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Dll/Regdll.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
Dll/unRegdll.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Dll/unRegdll.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
Dll/web2pic_url.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Dll/web2pic_url.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
Help.chm
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Help.chm
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
Web2Pic_Pro.exe
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Web2Pic_Pro.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
example.bat
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
example.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
uninstall.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
uninstall.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240704-en
General
-
Target
29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe
-
Size
882KB
-
MD5
29718855a5fdbc6fbcaefe19c9c2b820
-
SHA1
304e3c00ba8f756441bd722beae8eecfd88bd9b7
-
SHA256
f686f33c05d63eb019164da669495fbb53c181d4d39603d03018afd883a923e9
-
SHA512
9e12e6ed32e21f3c0ab253a18dfb4cc313c467431b5146816c661bba52d90154483a5040de9b4ff97826b67ee61a58db36c42aec85cb0fd4106d24eb850c8bf9
-
SSDEEP
12288:u+ZqJGa2fSkdzp3Kx4ofEDkpx4JYlsW0U4sl8S2taZ07GynF1ZYxHBYCC+ghI3:3ZqQB/9PQxiUTWPtQ07zFclDCu3
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1532 29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1532 29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
702B
MD54209be56495e2ae1d3f123ea59aa5762
SHA1e76c79a6a35337569ae68713fa885731c8c10803
SHA2563676fed73e6d0d262f903a976b5906d706ac1a1cbf3a90e69d0e2f46958825d0
SHA51220f6883d1b9f5ebded2988b9e6e37ef8fd03ce26b9ef38171fb8f30f9eba846ae9db96eb0a834935d522b41fc0378fcef2af829d13a5f3fd70790b06a95af7d6
-
Filesize
12KB
MD59aff00ec14e6cb71a13451011c580077
SHA15972140e4a0addb9eac685fe6037da7479f23ecf
SHA256cc8145683ad8fd77bd5cca193e84188e40d6d03a0a0d1d00e2bdbef91be96bb3
SHA512311abd4e9927c1424d794ba401f3935ad3b108a2124e58e0d29aa946514c7a1d62b9b08b013699f4f90796bdfb6c07211daddbb521c1d20ccee771f6ea43b110