Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
33f50e640e4...18.exe
windows7-x64
73f50e640e4...18.exe
windows10-2004-x64
7$PLUGINSDI...ol.dll
windows7-x64
3$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3lzma.exe
windows7-x64
1lzma.exe
windows10-2004-x64
1General
-
Target
3f50e640e44b44ce2e0044230131f5ed_JaffaCakes118
-
Size
1.1MB
-
Sample
240712-3kt2naxhmc
-
MD5
3f50e640e44b44ce2e0044230131f5ed
-
SHA1
ffe3c32ed385410e1898175d531f4ed43bc87cce
-
SHA256
9a49c02ff9257c1b58b2c388e03b6ed0c545726c108fcd8eac3a080b96ce4f34
-
SHA512
9e98f514a29eba6323af1b3925f268c785552849ed9f97f6ad5594977fdc0bb46dcf451875b61dbd0a022071ab48ccfb3a4d9fd836b98f4762f6d257027754a4
-
SSDEEP
24576:sQ+k0qiQ30FV4I4OIVWKoLUe8MEzyW7ThAP+idhkMiKm8iOnz1R27:BFDiVFVeOMWKmKhyWP+P+mhk3Mvn5g7
Static task
static1
Behavioral task
behavioral1
Sample
3f50e640e44b44ce2e0044230131f5ed_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f50e640e44b44ce2e0044230131f5ed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/DcryptDll.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/DcryptDll.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Uninstall.exe
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Uninstall.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
lzma.exe
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
lzma.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3f50e640e44b44ce2e0044230131f5ed_JaffaCakes118
-
Size
1.1MB
-
MD5
3f50e640e44b44ce2e0044230131f5ed
-
SHA1
ffe3c32ed385410e1898175d531f4ed43bc87cce
-
SHA256
9a49c02ff9257c1b58b2c388e03b6ed0c545726c108fcd8eac3a080b96ce4f34
-
SHA512
9e98f514a29eba6323af1b3925f268c785552849ed9f97f6ad5594977fdc0bb46dcf451875b61dbd0a022071ab48ccfb3a4d9fd836b98f4762f6d257027754a4
-
SSDEEP
24576:sQ+k0qiQ30FV4I4OIVWKoLUe8MEzyW7ThAP+idhkMiKm8iOnz1R27:BFDiVFVeOMWKmKhyWP+P+mhk3Mvn5g7
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/AccessControl.dll
-
Size
10KB
-
MD5
055f4f9260e07fc83f71877cbb7f4fad
-
SHA1
a245131af1a182de99bd74af9ff1fab17977a72f
-
SHA256
4209588362785b690d08d15cd982b8d1c62c348767ca19114234b21d5df74ddc
-
SHA512
a8e82dc4435ed938f090f43df953ddad9b0075f16218c09890c996299420162d64b1dbfbf613af37769ae796717eec78204dc786b757e8b1d13d423d4ee82e26
-
SSDEEP
192:8SEWBGgiJM4LN+xq56XdNcNz/NWdlJmlyOcROQ:8SEPgii9KTzyt
Score3/10 -
-
-
Target
$PLUGINSDIR/DcryptDll.dll
-
Size
18KB
-
MD5
85fec7a3cf730498d9eb668d95475ca0
-
SHA1
22ed4eeda3e859c39cffd7b83219b9df83b73cc4
-
SHA256
68c8db0ba5bc16e25c8b070167bed50300d7c59fe4915dd1921f57c464208ef2
-
SHA512
95aa1d400572de2b527ac00973bede213f573eb926cbd5ff761d55becd0c6ccb09cea5ebefd833f0cae7435d8b6310b5981d0e2d69379b7b1a1452fe625dd503
-
SSDEEP
384:2ZyQSewDbPmRqcXx2kMPrd9cbkUmR08EMg6:2btwnmR/xQdckUSEMg6
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
325b008aec81e5aaa57096f05d4212b5
-
SHA1
27a2d89747a20305b6518438eff5b9f57f7df5c3
-
SHA256
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
-
SHA512
18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
-
SSDEEP
192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/UAC.dll
-
Size
13KB
-
MD5
7f56c0d6a8733dec142814ed5a58b0ee
-
SHA1
c119e66f179cfb758966f3cf878466057bea1840
-
SHA256
86445396775370aff5834f10bda25e505b6f89efc69a04fe1ce46f5d128be73f
-
SHA512
8b3b9bed985b3583b7be8b2197bb068e5d5508f8b5c4a7fc1278b2662dc8d9a53fd6df63f636e44bfc5aa37f030ac76b8d259d6b446bf87d5c72b74ff5b158f3
-
SSDEEP
384:d/lNMKbnRWKYyCvDvQH3yBf/qPNGkVWYyLrcMf9VQ8c:d/lq+RDYJf/qPNGkQ5LrcCQ
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
6KB
-
MD5
acc2b699edfea5bf5aae45aba3a41e96
-
SHA1
d2accf4d494e43ceb2cff69abe4dd17147d29cc2
-
SHA256
168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
-
SHA512
e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
-
SSDEEP
96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
Score3/10 -
-
-
Target
Uninstall.exe
-
Size
51KB
-
MD5
006d6d8b606e66a547866fa7e67fc809
-
SHA1
14c1616880cdc4298aa093cf8dcec8b25a8442f2
-
SHA256
0b27dc552c06608edd450c89865f1728fa0d37daec77c6b56094de1de96452dd
-
SHA512
57f85b1ca1a2f3f91ba4b68a1f383367436b9f30698ef56dbd8c16718bac328075e1d3bcee064716b9c2b8bf72b8ffc67ac7559cf77a2d1a7f223e97e62b30ff
-
SSDEEP
768:P4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJ+lwlKhqc5rQ9NCC1Vhb0uip7:wLXB65939tY6HBg4sXJJlQGl1VhbGEd2
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/UAC.dll
-
Size
13KB
-
MD5
7f56c0d6a8733dec142814ed5a58b0ee
-
SHA1
c119e66f179cfb758966f3cf878466057bea1840
-
SHA256
86445396775370aff5834f10bda25e505b6f89efc69a04fe1ce46f5d128be73f
-
SHA512
8b3b9bed985b3583b7be8b2197bb068e5d5508f8b5c4a7fc1278b2662dc8d9a53fd6df63f636e44bfc5aa37f030ac76b8d259d6b446bf87d5c72b74ff5b158f3
-
SSDEEP
384:d/lNMKbnRWKYyCvDvQH3yBf/qPNGkVWYyLrcMf9VQ8c:d/lq+RDYJf/qPNGkQ5LrcCQ
Score3/10 -
-
-
Target
lzma.exe
-
Size
63KB
-
MD5
1c4d758c0954e843d2fa22703f653421
-
SHA1
d577e6f63cb53f5f68f094b9fbaefe5b0087e933
-
SHA256
f776415281ed68268577142b60839d0937c112be1ba0fb8470f5a387afc3ba62
-
SHA512
5b8c02473b8f57d243cac5ae1f5381a9a1dbd55bc976a172f36060b2d0c2ad80d4f956cd38d4ba7434b9b27583e0e753bcdb8b4772c1c54e926b365c90357c3e
-
SSDEEP
1536:ax7F8DW6pErklzKbDir++/McTJctWOrLRCIbDO+9a:akDWTrMKb2MFQCRCIe+4
Score1/10 -