Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
729718855a5...18.exe
windows7-x64
729718855a5...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Dll/Regdll.exe
windows7-x64
1Dll/Regdll.exe
windows10-2004-x64
1Dll/unRegdll.exe
windows7-x64
1Dll/unRegdll.exe
windows10-2004-x64
1Dll/web2pic_url.dll
windows7-x64
1Dll/web2pic_url.dll
windows10-2004-x64
1Help.chm
windows7-x64
1Help.chm
windows10-2004-x64
1Web2Pic_Pro.exe
windows7-x64
4Web2Pic_Pro.exe
windows10-2004-x64
4example.bat
windows7-x64
4example.bat
windows10-2004-x64
4uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2024, 22:34
Behavioral task
behavioral1
Sample
29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
Dll/Regdll.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Dll/Regdll.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
Dll/unRegdll.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Dll/unRegdll.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
Dll/web2pic_url.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Dll/web2pic_url.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
Help.chm
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Help.chm
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
Web2Pic_Pro.exe
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Web2Pic_Pro.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
example.bat
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
example.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
uninstall.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
uninstall.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240704-en
General
-
Target
Help.chm
-
Size
167KB
-
MD5
99d9d59022a7d0d798154a79781064ee
-
SHA1
f62891de322a58be98b657cdeb57b0aac5b32272
-
SHA256
d4e3243790d52524f223c0426cec7619068a04c2fc578c32d3d90fae1a3af0b2
-
SHA512
37c5313b855abbc43ac73e5381fc5e53b83583716b750beec8d8f37d6f247ce18ad0d0a34b4bd17260f60e314c6aaa99d6dda9800d0d6a33ed55bcee3615a452
-
SSDEEP
3072:ho5bBCfnitFwjQYVQUoxydFA9Z6Z4Xcv74rdkqR0HNxAoNXzCNS+:hn65+ouu9ouXcDKRRk9NXzCk+
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2564 hh.exe 2564 hh.exe