Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

3a919ba335...18.exe

windows7-x64

7

3a919ba335...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDIR/OnTop.dll

windows7-x64

1

$PLUGINSDIR/OnTop.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...sk.dll

windows7-x64

3

$PLUGINSDI...sk.dll

windows10-2004-x64

3

Desklets/C...ar.exe

windows7-x64

7

Desklets/C...ar.exe

windows10-2004-x64

7

Desklets/D...ch.exe

windows7-x64

7

Desklets/D...ch.exe

windows10-2004-x64

7

Desklets/W...er.exe

windows7-x64

7

Desklets/W...er.exe

windows10-2004-x64

7

jpdesk.exe

windows7-x64

7

jpdesk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a919ba33540362b774b1f288fca3d13_JaffaCakes118

  • Size

    3.4MB

  • Sample

    240711-y1t95svclc

  • MD5

    3a919ba33540362b774b1f288fca3d13

  • SHA1

    6ea654938da231269b8ad23e78e0977afe7b4bd8

  • SHA256

    eca91dfbd4fd577723ce5fc218d9a5f746db78d30d0f37b2814670b46ab82162

  • SHA512

    5f2dd359d9b24c9b5967f2b22bfe4aff139848fa0a6585c18d28cd4deaa8f2afbfb7a105cfd45c5e54fdb14907793903599f86eeb6b4aa05801c44b5b7c91456

  • SSDEEP

    98304:ppIBDz0wGXd2YepoaJULUkQEGudyJ6+Wr6H7Z76Ce2s:ppQz8LOVULNQzuEc+AAZmCXs

Score
7/10
upx

Malware Config

Targets

    • Target

      3a919ba33540362b774b1f288fca3d13_JaffaCakes118

    • Size

      3.4MB

    • MD5

      3a919ba33540362b774b1f288fca3d13

    • SHA1

      6ea654938da231269b8ad23e78e0977afe7b4bd8

    • SHA256

      eca91dfbd4fd577723ce5fc218d9a5f746db78d30d0f37b2814670b46ab82162

    • SHA512

      5f2dd359d9b24c9b5967f2b22bfe4aff139848fa0a6585c18d28cd4deaa8f2afbfb7a105cfd45c5e54fdb14907793903599f86eeb6b4aa05801c44b5b7c91456

    • SSDEEP

      98304:ppIBDz0wGXd2YepoaJULUkQEGudyJ6+Wr6H7Z76Ce2s:ppQz8LOVULNQzuEc+AAZmCXs

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      254f13dfd61c5b7d2119eb2550491e1d

    • SHA1

      5083f6804ee3475f3698ab9e68611b0128e22fd6

    • SHA256

      fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28

    • SHA512

      fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7

    • SSDEEP

      192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/OnTop.dll

    • Size

      3KB

    • MD5

      7c0c240e911a521e8e554a10d04e558f

    • SHA1

      d12ca9c464f2764e211039c09e56cb347626f7c7

    • SHA256

      28cf47c05c86b2264ea1da120d3644cb46c86d6f27072a9a853e63e05ec97a25

    • SHA512

      579b6787061efdc7f618f3c5a513cb539ccbe12ca41ba5e9ba8f00d03600edcdd82262b0fbfd58b96231c461f18b1233d657cbd0d1b827ea9df5374508578707

    Score
    1/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsWebJPDesk.dll

    • Size

      300KB

    • MD5

      d7945b9e9ec6598060ef3b9f93be3f02

    • SHA1

      b36a25ad5a631c77050b908c261c1cafb28f0b06

    • SHA256

      b13a84dfb4a801a89a97f3eab6edeb3a47cbb5fa6d104503ce714a9f20ed69f9

    • SHA512

      de0af351675c702f9db825b69bc8bd4ddcb9ac5e61deca98e0acdc7b7ec32b6d7a751dff1969816d9ad3efafc818641b679089f25d81d56120d3e603a0b6d0f9

    • SSDEEP

      3072:3L2pPD6npPU86KtvrySRqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5:3LEPDWphtTRqdKcS0Hwjl2Jw

    Score
    3/10
    behavioral11behavioral12

    • Target

      Desklets/Calendar/Calendar.exe

    • Size

      366KB

    • MD5

      0e64a2f8b4d0a8003fa553d3d709e048

    • SHA1

      a57162fd69c2801322b9212b8b085baf3cd79e18

    • SHA256

      02ec350c5baae3da4dd3eea685c250bcf7cadce61ff7cc5a4c53d292134d18cb

    • SHA512

      79800698a5e7bad400821a536e3a7f85a9034450104d8c810c216495ee3c25b6961d13b0608a9f047b949fb7af11fb0cedba6e16858f1f4f0d3e18f20f4f3dc4

    • SSDEEP

      6144:3GOyiXIyVqSI33pwATsoNJ3P3t+w0OJ2zwppPHsubEpbAydKJ:3AxyxI3ZwAbJ3F+OK0subEpddI

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14

    • Target

      Desklets/DeskSearch/DeskSearch.exe

    • Size

      306KB

    • MD5

      511cea32ac7eb6d35fe3d8a805c4db24

    • SHA1

      fc7c88b02e3c76bee7119931bac18c07a1855a31

    • SHA256

      1733879d0e9bfb08fb53bb889d77b74d8688c934ce6496a510780c675acbe619

    • SHA512

      68f8ade86be31614444c5edff5ee3620a4d0d3c002073c8104d574a066c7cd141992eccaa966566959e023cadd445e2c7779810f6accc23f74b70c02be700e68

    • SSDEEP

      6144:H0ufor7HG1px+DcFMyVp3mya2CDeu2rsojsVOymKTjQbE1ZF:Uufo/0+DcFMyL3my142rsksDR

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

    • Target

      Desklets/Weather/Weather.exe

    • Size

      428KB

    • MD5

      6535c09f6bde97966fcd1204a8b2dbea

    • SHA1

      69145fe65129e74d1e43f825bce8e6261cbd76c0

    • SHA256

      eae843e68e66ad9fa9f30b272e845989759473b3a6d13fcdb168fae0ea019fff

    • SHA512

      59799f9bc34ec1329a6f3735bfbffee51706bce940dbe78d21f3918a03cc699cf0cea4637a5f64a1cb899ce5270bfb73c6c1bbe219ce0095847986307c5a7511

    • SSDEEP

      6144:pZKpSPYPtjcFlLqYVPhwFP35YuNlrl1tCcE4bHeVsMC2oAYOGO/Wtz0tNSN:pZsVjcFUYnwFhRN1EcJHcsMSrr

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral17behavioral18

    • Target

      jpdesk.exe.tmp

    • Size

      851KB

    • MD5

      390d0b24025393b6d19e788ecc14e374

    • SHA1

      2b6705fd35d751a5e24d092903dbd6de53d13a42

    • SHA256

      b3852f3b5fe203166b4e1cc8399788b28a6de122e1cdc2bca106865902e77422

    • SHA512

      f531c53b2aa0fe368cad4fb2dbe44b8e07d7e4d0e0f186d2edc4c606547d33b4009f211565d16d46f65650cf6d5d82f3a8c8aad1c747dc0dd5b822dcbccfbd3e

    • SSDEEP

      12288:csA0imoBqk2BnzlGkVFOdNAg7jWoGem4wbNok6rsxDK2TfptuUgjYD/Ug4JrkE6k:4qx5zpeEgPweaZJxuOgjYTUg4xkuJi41

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks