Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

c1bd74a12b...18.exe

windows7-x64

7

c1bd74a12b...18.exe

windows10-2004-x64

7

$PLUGINSDI...if.dll

windows7-x64

3

$PLUGINSDI...if.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...os.dll

windows7-x64

3

$PLUGINSDI...os.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

7

$PLUGINSDI...ay.dll

windows10-2004-x64

7

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/nsWeb.dll

windows7-x64

3

$PLUGINSDIR/nsWeb.dll

windows10-2004-x64

3

$TEMP/instloffer.exe

windows7-x64

3

$TEMP/instloffer.exe

windows10-2004-x64

3

$TEMP/license.rtf

windows7-x64

4

$TEMP/license.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1bd74a12b362a005f08a230660a0cd2_JaffaCakes118

  • Size

    309KB

  • MD5

    c1bd74a12b362a005f08a230660a0cd2

  • SHA1

    2dc366327a9e3117595c6c10e7921e0c071e5d43

  • SHA256

    0cd3055669bbfdac70ec3551654b90a1467eaf1e7abf76d8dc83c406454bad20

  • SHA512

    055270b0ef22c471b52ffacc1548f40e3a6ae5576565d6e5d20f49bc84a3714e2f65ca9ed84cba1bc4707ff6eb4c3608ed496a8bcef717ae77bd7ce397fe2522

  • SSDEEP

    6144:Ee34FQGHKt16DT6Dcs2aQFGu4r/zqvUA6OAiN:yVqJcs2acGuMLA9vN

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • c1bd74a12b362a005f08a230660a0cd2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AnimGif.dll
    .dll windows:4 windows x86 arch:x86

    f600fe515bbb976d5966dd4286e0ebd4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:5 windows x86 arch:x86

    b997a221e444f5e6463b28778735cf2b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWeb.dll
    .dll windows:4 windows x86 arch:x86

    d12ed83df3a4aa87887f14a225ff95d4


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ajax_loader.gif
    .gif
  • $TEMP/coupish_largo.gif
    .gif
  • $TEMP/dealply_largo.gif
    .gif
  • $TEMP/fondo.bmp
  • $TEMP/header.bmp
  • $TEMP/instloffer.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/license.rtf
    .rtf
  • $TEMP/moreinfo_offerbox.bmp
  • $TEMP/square_babylon.bmp
  • $TEMP/square_babylonv2.bmp
  • $TEMP/square_chiliads.bmp
  • $TEMP/square_coupish.bmp
  • $TEMP/square_dealply.bmp
  • $TEMP/square_offerbox.bmp
  • $TEMP/square_sweetim.bmp
  • $TEMP/toolbar_bb.bmp
  • $TEMP/toolbar_bbv2.bmp
  • $TEMP/toolbar_sweetim.bmp

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.