Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

45042eccc4...18.exe

windows7-x64

7

45042eccc4...18.exe

windows10-2004-x64

7

$PLUGINSDI...ub.exe

windows7-x64

7

$PLUGINSDI...ub.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...se.dll

windows7-x64

3

$PLUGINSDI...se.dll

windows10-2004-x64

3

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...br.rtf

windows7-x64

4

$PLUGINSDI...br.rtf

windows10-2004-x64

1

$PLUGINSDI...pw.rtf

windows7-x64

4

$PLUGINSDI...pw.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45042eccc4b8be680ccf2b33f2444a3d_JaffaCakes118

  • Size

    469KB

  • MD5

    45042eccc4b8be680ccf2b33f2444a3d

  • SHA1

    c2a159c920074a2abeb56fa74b05f71745b2720b

  • SHA256

    488c938e13a82908aaf0448e98aed340fd8f42b43ad726c1facfdd28773b2437

  • SHA512

    ca43cc76388174daed4ffdd6791d78f55ca75d9704b5db6c7f7efe5cbe1795eaf9c34b66794b8047491fa7f453e86da303c58c7f70f3bcdce9118bce5573dd27

  • SSDEEP

    12288:dfOsa9uw2HuFybubDbQpJDwmUN1g38XZpYJORiFKPI6x9:dfq2Sn+Dw/1bBPI6/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs
    installer

Files

  • 45042eccc4b8be680ccf2b33f2444a3d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApStub.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:4 windows x86 arch:x86

    0d87660e15e4e2499d63742f6c9630fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DefaultTab_license.rtf
    .rtf
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OBImageEs.bmp
  • $PLUGINSDIR/OBImageFr.bmp
  • $PLUGINSDIR/OBImageIt.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/fm_license.rtf
    .rtf
  • $PLUGINSDIR/frg_license.rtf
    .rtf
  • $PLUGINSDIR/gc_license.rtf
    .rtf
  • $PLUGINSDIR/image.bmp
  • $PLUGINSDIR/image13.bmp
  • $PLUGINSDIR/image14.bmp
  • $PLUGINSDIR/image15.bmp
  • $PLUGINSDIR/image17.bmp
  • $PLUGINSDIR/image18.bmp
  • $PLUGINSDIR/image19.bmp
  • $PLUGINSDIR/image2.bmp
  • $PLUGINSDIR/image21.bmp
  • $PLUGINSDIR/image22.bmp
  • $PLUGINSDIR/image23.bmp
  • $PLUGINSDIR/image24.bmp
  • $PLUGINSDIR/image26.bmp
  • $PLUGINSDIR/image27.bmp
  • $PLUGINSDIR/image28.bmp
  • $PLUGINSDIR/image29.bmp
  • $PLUGINSDIR/image3.bmp
  • $PLUGINSDIR/image30.bmp
  • $PLUGINSDIR/image31.bmp
  • $PLUGINSDIR/image32.bmp
  • $PLUGINSDIR/image33.bmp
  • $PLUGINSDIR/image35.bmp
  • $PLUGINSDIR/image7.bmp
  • $PLUGINSDIR/image7b.bmp
  • $PLUGINSDIR/intlib.dll
    .dll windows:4 windows x86 arch:x86

    e886a412cdaf11998a8eeffda508e913


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/jp_license.rtf
    .rtf
  • $PLUGINSDIR/license_pbr.rtf
    .rtf
  • $PLUGINSDIR/license_pw.rtf
    .rtf
  • $PLUGINSDIR/license_red.rtf
    .rtf
  • $PLUGINSDIR/license_rs.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisdt.dll
    .dll windows:1 windows x86 arch:x86

    aa911a57ef69e33e93666ad699a8d7be


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/real_license.rtf
    .rtf
  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.