Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
729718855a5...18.exe
windows7-x64
729718855a5...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Dll/Regdll.exe
windows7-x64
1Dll/Regdll.exe
windows10-2004-x64
1Dll/unRegdll.exe
windows7-x64
1Dll/unRegdll.exe
windows10-2004-x64
1Dll/web2pic_url.dll
windows7-x64
1Dll/web2pic_url.dll
windows10-2004-x64
1Help.chm
windows7-x64
1Help.chm
windows10-2004-x64
1Web2Pic_Pro.exe
windows7-x64
4Web2Pic_Pro.exe
windows10-2004-x64
4example.bat
windows7-x64
4example.bat
windows10-2004-x64
4uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Analysis
-
max time kernel
140s -
max time network
54s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2024, 22:34
Behavioral task
behavioral1
Sample
29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29718855a5fdbc6fbcaefe19c9c2b820_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
Dll/Regdll.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Dll/Regdll.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
Dll/unRegdll.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Dll/unRegdll.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
Dll/web2pic_url.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Dll/web2pic_url.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
Help.chm
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Help.chm
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
Web2Pic_Pro.exe
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Web2Pic_Pro.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
example.bat
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
example.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
uninstall.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
uninstall.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240704-en
General
-
Target
Web2Pic_Pro.exe
-
Size
502KB
-
MD5
b2ccc32feac58a3750fe8974187f4b7d
-
SHA1
904ea756b1f840afccd6724566249615a53f2689
-
SHA256
edd9b18ee2dd49f5ffc38f4e3e0189391d8c3bb601ea61c229c185d3aed5b4bd
-
SHA512
4ba9ba07ba4b0df4fae99e197b7c0c821e88c2b971dccca136aec9a75f7e2921f363765e4617631774b1bd7e542b25a9fffb5c0e7709866146f19b0c98787d43
-
SSDEEP
12288:J8V4vfaDkBx4JYlIR1qqx4sl8M2EmlQoJ4RKQaa+O:J6ex5qxTWdHGk4RKlO
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\win.ini Web2Pic_Pro.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1844 Web2Pic_Pro.exe 1844 Web2Pic_Pro.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
314B
MD53bc16ee0da5162d2e6060b4b34864f8d
SHA1101ac946af83072c52b8c862832e9c4ae03c1cd3
SHA256a3f2fa0e442eb146108eb286436b909a78e029bd68ee6d914bb5dfaf7826f34b
SHA512a7f21a85083821ff6207b0e3b5d9d45a1b92ca05107ba83a0c14e8069d107e6fdf5b13a977a3a23108ed5ad880febda72d529eea767c3c668b302214a394f4d8