Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
35e6b51208e...18.exe
windows7-x64
75e6b51208e...18.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3Solitaire.exe
windows7-x64
3Solitaire.exe
windows10-2004-x64
1Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3aminstall.dll
windows7-x64
1aminstall.dll
windows10-2004-x64
3solitaire.dll
windows7-x64
1solitaire.dll
windows10-2004-x64
1General
-
Target
5e6b51208e8558762a0116bdd0771191_JaffaCakes118
-
Size
4.1MB
-
Sample
240720-bcajhasfmb
-
MD5
5e6b51208e8558762a0116bdd0771191
-
SHA1
520010ea9c112e8891549e8091aaad4f74a99fa3
-
SHA256
d8aa2091ba067de919107cbed8ecf8826429107aa1a2f2558b2f24d86f282391
-
SHA512
63518609af4a309dcdec5b5e26add445352fc78e95dcc9743450f492d79c253d0c75686a146b0cdb428e0099be915c9e4e4c3c75ce15c8fd4fcca1fe85d62998
-
SSDEEP
98304:+Hh9W47PZtKlQXZkBoMwdUaFbCUXWgrdYzcj2NsrGFk:Q9xtKlQJ6ogaZvWgruzcj9rT
Static task
static1
Behavioral task
behavioral1
Sample
5e6b51208e8558762a0116bdd0771191_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e6b51208e8558762a0116bdd0771191_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Dialer.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Dialer.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/GameuxInstallHelper.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/GameuxInstallHelper.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Solitaire.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Solitaire.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
Uninstall.exe
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Uninstall.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
aminstall.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
aminstall.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
solitaire.dll
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
solitaire.dll
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
5e6b51208e8558762a0116bdd0771191_JaffaCakes118
-
Size
4.1MB
-
MD5
5e6b51208e8558762a0116bdd0771191
-
SHA1
520010ea9c112e8891549e8091aaad4f74a99fa3
-
SHA256
d8aa2091ba067de919107cbed8ecf8826429107aa1a2f2558b2f24d86f282391
-
SHA512
63518609af4a309dcdec5b5e26add445352fc78e95dcc9743450f492d79c253d0c75686a146b0cdb428e0099be915c9e4e4c3c75ce15c8fd4fcca1fe85d62998
-
SSDEEP
98304:+Hh9W47PZtKlQXZkBoMwdUaFbCUXWgrdYzcj2NsrGFk:Q9xtKlQJ6ogaZvWgruzcj9rT
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/Dialer.dll
-
Size
3KB
-
MD5
de4b7820e03027762f0255059dccef1b
-
SHA1
b5545c72537fe89d4db4286a8448db62edc56c2b
-
SHA256
39b9f9e1ff6c4f4ea9739cad159448b6bf5f570b09b839d5f43f2abd79c16771
-
SHA512
9152538cf1ea8c9f1a6b082f4cacb97cb05be915ff608125d4c705a8611a1e9368930e5284c820ff0f1106075a65e14d45052de6a75d7878ad5f75111d134455
Score3/10 -
-
-
Target
$PLUGINSDIR/GameuxInstallHelper.dll
-
Size
73KB
-
MD5
b225e2a7fa0c597b68cd7b06bfcd7fa2
-
SHA1
fd3df3532c38b8fc750248a91839f8653498084f
-
SHA256
9ce7213567d8310e69c82f88586fcd38b5dd26a21c851b5d6f9c73bf46ff1429
-
SHA512
0c14370373472113a57804097490acc6c490bf3db1c4a41dc0421dcfbdc79156397e6eaf60fd33e12809bbd4e8b87538546a7d5373eeeaa8573a8a871c5d7f32
-
SSDEEP
1536:IOY/mBRLy0VN5sFAjNsLKapmxQZfjCGOOc1ztWhiFhsHaevt:IOY/30r5sFAJsjkr1ztWsFnEt
Score1/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
57db62366ef11fdc47922a02031f0492
-
SHA1
6d30db5285b653025f94e74b9b045870dc0aeb7a
-
SHA256
2338752092918db8e068d55bea61f8cdeb9be37b6e6d30a730d9703b169b08b4
-
SHA512
d0257e02370863e07feb9346b88d87a102089f0c48aea13e069e55a14f0f6db51fb3d5f41ed5d2f39e36b612f4b6194a6b7c059709808bfb23ded89d0b0a3db5
-
SSDEEP
192:gzixixDOHhG9db9rd+oSVPECMlh3I8tqDynq7hwbbHF1QuCb:gOx0DOHqrdwTY6+nq72bbMum
Score3/10 -
-
-
Target
$PLUGINSDIR/LangDLL.dll
-
Size
5KB
-
MD5
51d66dbc791228d8411159379523d971
-
SHA1
029981130567cd45cb98cff5041acbec13d6ba3f
-
SHA256
9a2d4add45790a47d56aa67b9199b66119ec0a21185f3df6fabbc56a9b47cb88
-
SHA512
c224b16c27869767f7fe403094797bc580b4710c92f05f7fad5fc405e834bd12b2c5022fa6e380ad7e2f58650115afe8792ce8bfba932c4fb46e8d27d99ccc7d
-
SSDEEP
48:SHEnz1tBa/XC1TQO50vwovgxVLrh2TpXHW+iJ/L9Cp+0rf1uapRkdfhhdJcN:H9UXC13C/ovLrh2cD/L9NochjcN
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
12KB
-
MD5
e32c7911814ae37f75ad9340fce9f46c
-
SHA1
a24483c292fc1a89fe34962cc6fb685d16b42e97
-
SHA256
a0de27810988abaa75ef1a3b8035a56f6632ee9bd9412918dda608dfe1ad6e4d
-
SHA512
1201782253eadba8381d660e9e67bf2c74fee92955802e569d8172613d4ef8524985b3a747bb17d0ff256c2ca43e329d1414eacf3491092f4d12efd5b53927e2
-
SSDEEP
192:BTed/9E1XMNUrW7VymsS9W+7HaQM7zFSnQXiCVIXuZsav+zPzrR2RMi:BTqE2UrW9tWeaQ6zF1NIXu6a2DP8Ki
Score3/10 -
-
-
Target
$PLUGINSDIR/StartMenu.dll
-
Size
6KB
-
MD5
7e45b2485d98ad5a44514b6df4fa4544
-
SHA1
bf000b012b341925aaddb546331064bd6949816c
-
SHA256
95cf100fe8ce66189514002965c6274d2c9d3089fe885fb9230aae547a9e4012
-
SHA512
01fa8e8cfb85243cc7ea89ede30aad21eed56508cc39e327c847a0c6c2121c3882d5b7068a1d56bf37d576d589697a58c1de8fa168707aa25d5e3aaf0486fa0d
-
SSDEEP
96:JLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsxQhEfP0:JLjPk8OT30FFA2CP0
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
b21538d9f049d3e3e8b666744d7ca36d
-
SHA1
b97fc58f9aa238758a7574a2e32dac4e97392f47
-
SHA256
9dbe958fd425903ffc2197a112bec4fa597284f9637fe8fd5685016f32e21334
-
SHA512
05d2c660a43519fd35daa3b4310419b33e61ce8557bde55942315ca59c3b9cb9fdeaea42c403ad78a54fa9923eaa712bcf5a10dea83619a18c4ef0c451e6d533
-
SSDEEP
192:ROSsJI/rqmIDNLU0dq51EgAiNbubv6xLZ:/HQQ0d01Egbq76x
Score3/10 -
-
-
Target
$PLUGINSDIR/UserInfo.dll
-
Size
4KB
-
MD5
593345196fcd1c553b0702cc026ccccd
-
SHA1
84446849c10e0c4d6683072f4c2eea5a085bac2f
-
SHA256
fb4a4bea088b8dbf2adda6fdeb50be4b96bf20ba62bd9ac64b68ea628166a28d
-
SHA512
b28da01bec7a34a493316606c7406c06d0b278f1318563874f037caf203c2ec261c3f5c2a1790c6c177537bbb0f4dd0b7be482976f7114f70be75b5e4b311306
Score3/10 -
-
-
Target
Solitaire.exe
-
Size
2.0MB
-
MD5
33c2c5451c878785030e7bcd1dfd401b
-
SHA1
a7beb85b2cb4b3fd39f147fa010c51aee13a9360
-
SHA256
7fe9e5a56ae12ae4cd4680a24a5423b23a7aec4a30c954f56696b000dd46c893
-
SHA512
4ecac7f97c595185e89ccd98d14a3973a94288f3608dabf1f96929e3f2839146d8884269e4f7bbd4c3fb155f2a18c43e287934af35bcc2267c5955a08afb6f7c
-
SSDEEP
49152:ymyQZmum3Qd6onx9J8GOH4zRFCTSCfHIS/XXJ45qEF0Mj6jK:Xlek59OGLzz2SlSP0h0YEK
Score3/10 -
-
-
Target
Uninstall.exe
-
Size
148KB
-
MD5
ac1987eb85b44e639f0cad7c0720086e
-
SHA1
22f3c6708cebe5a2b9c393c0340ae338e2539fbd
-
SHA256
54f5304e6f4261bc953722f44fc79765962dd4c5013ecac4fe931f98376fa4b4
-
SHA512
e892b2e6288aedae67566e2b078e5fb712efb2e6b852a2e9a1af58bf0f5b6e717983c463592e99fbda36409370752c4b98070fe7036542c9a04f4ec09d3f951b
-
SSDEEP
3072:gk5+bFdkJYYschIykPtTIJLDaDKvheeLJsDcbUeEPEiKKVKuU8:V0FWJnaDKv5LCgEcKnH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
57db62366ef11fdc47922a02031f0492
-
SHA1
6d30db5285b653025f94e74b9b045870dc0aeb7a
-
SHA256
2338752092918db8e068d55bea61f8cdeb9be37b6e6d30a730d9703b169b08b4
-
SHA512
d0257e02370863e07feb9346b88d87a102089f0c48aea13e069e55a14f0f6db51fb3d5f41ed5d2f39e36b612f4b6194a6b7c059709808bfb23ded89d0b0a3db5
-
SSDEEP
192:gzixixDOHhG9db9rd+oSVPECMlh3I8tqDynq7hwbbHF1QuCb:gOx0DOHqrdwTY6+nq72bbMum
Score3/10 -
-
-
Target
$PLUGINSDIR/UserInfo.dll
-
Size
4KB
-
MD5
593345196fcd1c553b0702cc026ccccd
-
SHA1
84446849c10e0c4d6683072f4c2eea5a085bac2f
-
SHA256
fb4a4bea088b8dbf2adda6fdeb50be4b96bf20ba62bd9ac64b68ea628166a28d
-
SHA512
b28da01bec7a34a493316606c7406c06d0b278f1318563874f037caf203c2ec261c3f5c2a1790c6c177537bbb0f4dd0b7be482976f7114f70be75b5e4b311306
Score3/10 -
-
-
Target
aminstall.dll
-
Size
157KB
-
MD5
cec88cfc2853cf5490d23af767f3aae4
-
SHA1
642b38211d1c18def13b9d6b76b622f7b36779a2
-
SHA256
2a7ee893990dc65bdd4865e0ff3295fe331c82981a5cc40751c8fdfe90d1190b
-
SHA512
9dc4ed2fcbdf1f01f0a873a7607a705d80f8621b08aa18ef56ea8b8b5cce29c304507bed6096a28bfdde4a15dd76a57ffcdd20b175157682add98d05db354b52
-
SSDEEP
3072:8oy/SJZ1bsvb7EX3jUzrK9TBffJqteZDXwtep6+:8aosXmK9TBZFK
Score3/10 -
-
-
Target
solitaire.dll
-
Size
1.6MB
-
MD5
bd21d860737e9821f18e331e8956a45a
-
SHA1
770369399316fc4f0808ca040f7677ae78083a75
-
SHA256
dbe751dcd7c8d27ff7f8c9e0b3096d6b2349d6144720d7682c9d7b3633141be5
-
SHA512
35174f00edea22fc00931381c10921ab0f00c42d0bcff168e49d4be45624c5d06df20f894eca06e9c3f8d18628c9851af3fa7fcfbdf944cad9c0f957a3c4e2f0
-
SSDEEP
49152:E7BJrBCyHUlfdeHO/h4M2MWL4Foh9thRz:E7BJkyHUKUX22FohlRz
Score1/10 -