Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
736f1e07ff3...18.exe
windows7-x64
736f1e07ff3...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3MediaInfo.dll
windows7-x64
7MediaInfo.dll
windows10-2004-x64
7Uninst.exe
windows7-x64
7Uninst.exe
windows10-2004-x64
7dp_fastvid...rt.exe
windows7-x64
7dp_fastvid...rt.exe
windows10-2004-x64
7mencoder.exe
windows7-x64
7mencoder.exe
windows10-2004-x64
7pthreadGC2.dll
windows7-x64
1pthreadGC2.dll
windows10-2004-x64
1General
-
Target
36f1e07ff32336cb803034645dd643b2_JaffaCakes118
-
Size
5.3MB
-
Sample
240711-advqdsxfmk
-
MD5
36f1e07ff32336cb803034645dd643b2
-
SHA1
0667551d99afcb01ed2649b05ab864ee6de527b4
-
SHA256
df8d5c1e306475f776e460ad64c54e8ecc09326dfd4bb95994528dd08c04ef9f
-
SHA512
66faea7dd3d0304cd12650589e50f2c2f0b824e690810a2da5582a627847f8a804cb79731ae6f663694d986dbd90270963300c218e465c0fa6a0f56bac39fe53
-
SSDEEP
98304:gosr9e5MlJuo+xfBR/paUA6eGfkhLPPnjrdlJ4v1V6mw8te:z55vf3AUAefS4v1JXe
Behavioral task
behavioral1
Sample
36f1e07ff32336cb803034645dd643b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36f1e07ff32336cb803034645dd643b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
MediaInfo.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
MediaInfo.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Uninst.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Uninst.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
dp_fastvideoconvert.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
dp_fastvideoconvert.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
mencoder.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
mencoder.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
pthreadGC2.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
pthreadGC2.dll
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
36f1e07ff32336cb803034645dd643b2_JaffaCakes118
-
Size
5.3MB
-
MD5
36f1e07ff32336cb803034645dd643b2
-
SHA1
0667551d99afcb01ed2649b05ab864ee6de527b4
-
SHA256
df8d5c1e306475f776e460ad64c54e8ecc09326dfd4bb95994528dd08c04ef9f
-
SHA512
66faea7dd3d0304cd12650589e50f2c2f0b824e690810a2da5582a627847f8a804cb79731ae6f663694d986dbd90270963300c218e465c0fa6a0f56bac39fe53
-
SSDEEP
98304:gosr9e5MlJuo+xfBR/paUA6eGfkhLPPnjrdlJ4v1V6mw8te:z55vf3AUAefS4v1JXe
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
325b008aec81e5aaa57096f05d4212b5
-
SHA1
27a2d89747a20305b6518438eff5b9f57f7df5c3
-
SHA256
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
-
SHA512
18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
-
SSDEEP
192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score3/10 -
-
-
Target
MediaInfo.dll
-
Size
545KB
-
MD5
6ec40f6a2ac2ad1b3eb61b0ff6e0a42a
-
SHA1
d9385b8c6ae8c90b8305aa1da7f62cd8038d8134
-
SHA256
f8e03c0035c917746d6b8855d595c1732cc49821f5fbdc722dccbb447f58560a
-
SHA512
4a008dee40d60b310108030f0e3a38b8387b36923ed0c567de7eaa928d0a3c3d4440112110fe7a607d2f531b67cc0d1b4783f12cf3f36b09616a456d47bd7bcd
-
SSDEEP
12288:MYVj6mhnSjOrBaBd4fRw9grVEDisIL5m/QUDzxkw/Og6zg1I6d/oST:MYE/CU6ZnrVEDisCmISbcx6
Score7/10 -
-
-
Target
Uninst.exe
-
Size
37KB
-
MD5
0d3b187c4fbde817c5b46f60bb18738c
-
SHA1
8d2c75332908a6dbe78baaf4cd498c419fca353d
-
SHA256
37cadac7696f2cf57a15c58bf586ac7addd56111822d18574572f97cd72171fd
-
SHA512
d45f11bebe05f94fb57f11111e0e49d2ba59294cf9c1e80a8046bd4c8d96816a5773e3a30bb8519fca029ed9da12fa902b74abd69af87a69cb2a8a64b813e9c7
-
SSDEEP
768:L3CPkfOnbmBk1l180vzdvDw6+nbcuyD7U7g/2iZvAm6kRRI+6LJRnZV:mEOnnptDwBnouy87g/L1As6VV
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
dp_fastvideoconvert.exe
-
Size
233KB
-
MD5
94309f26b4bc5397f77d91dddad99a67
-
SHA1
673b15cfcee607afa7585ac955b74261d8286381
-
SHA256
7247442aca8e8c822b70f183f6d8565536795afbb891aa34f5ab8dfe9f620202
-
SHA512
bd975797568f60116818ea84ecd064c9ee0dc354353ff6f5a8169469921dd48eff6ca6bf39f74560a119d81802967e951828d36c5cb5359d223c464a72a99b1e
-
SSDEEP
6144:E/Zu8ssUzXaqY0fAIb/G2bCBLr4s7BEbbx00pNISKaRDHMTGsVro:c1bUzsStEhO20ff59MTJ
Score7/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
-
-
Target
mencoder.exe
-
Size
4.4MB
-
MD5
80adb546110293c22f7db930d812b35a
-
SHA1
153bfd273b9249ad942f045b1b5c8f85c531753f
-
SHA256
ab130686715667b3c98dfc7a0afbf5ea6a5b4c02806a4fbe62fea15044b62a7b
-
SHA512
aea9774f392028745494e1307c57bf7cef80de1da0cb876f29f0493f6fb6b3a4e81691b748cacf383620fa597f26eb2f27486e37fa953afe973c810f8876067d
-
SSDEEP
98304:TML/+BLn4R+ua/O1RLftUiwjNj8GYl23dkBmRKvHX:/nYO/OXfT23d/M
Score7/10 -
-
-
Target
pthreadGC2.dll
-
Size
35KB
-
MD5
2aaafd23e9a77dd8fc3d73a45cfeac01
-
SHA1
f41ebb61094231af29dc378c1a2c8620102eb58c
-
SHA256
cd4104379b2aac36b2465623540e30052b2b44f90229709e7d0c65c98394fc05
-
SHA512
ccd398eaf34c3b2b402e7cbd447fcb0819077ed7ed6c2e874fa72ffead14facef830b864014e3d5b399a8b52561dd0000251177fdb6e027451043a265ab731f3
-
SSDEEP
384:6XKAwDe/yMw0U0GuOI+KDYZ1EWsLKkSqPmMmg2oes9yzCuFYh3oDqLjBISO0IqMU:6XKAm0UsO76WsxDmELsCDIMiH3YN
Score1/10 -