Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eac1a4b8f006ae8c4042e8b540235541_JaffaCakes118

  • Size

    228KB

  • MD5

    eac1a4b8f006ae8c4042e8b540235541

  • SHA1

    c491940b56d64e219175a809c0c302b438a3d76f

  • SHA256

    92980d1b8b729efce68efe3fef4e8b05760448f62c48c62e87095d31ab8679bd

  • SHA512

    48777b1888de9e3446e0ce4607d56a9721230a50ef6e6e40c0cf64d29880b67d9dbae34622fd707e8cc7025f9dc1e732e35964bc69e8a258e97936268771c714

  • SSDEEP

    3072:3Lk395hYXJ8C++W+t++6+++++GXe3cn9uk9x/Qy4JwHB09tXZCJiidKcHknR1fmV:3Qq8O6HrYy8UG1Giid7kGPm/g4CP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • eac1a4b8f006ae8c4042e8b540235541_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $DESKTOP/ezthemes.com/Folder.ico
  • $PLUGINSDIR/ACCEPT.bmp
  • $PLUGINSDIR/ACCEPT_on.bmp
  • $PLUGINSDIR/AGREE_on.bmp
  • $PLUGINSDIR/BACK.bmp
  • $PLUGINSDIR/BACKNEXT_on.bmp
  • $PLUGINSDIR/BB_tb.bmp
  • $PLUGINSDIR/BLANK.bmp
  • $PLUGINSDIR/CANCEL.bmp
  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:5 windows x86 arch:x86

    17ea51acf0005f354251d1882460a13c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DECLINE.bmp
  • $PLUGINSDIR/DISAGREE.bmp
  • $PLUGINSDIR/FINISH_on.bmp
  • $PLUGINSDIR/FM_Logo.bmp
  • $PLUGINSDIR/FM_TB.bmp
  • $PLUGINSDIR/FT_Background.bmp
  • $PLUGINSDIR/Firstlook_EULA.rtf
    .rtf
  • $PLUGINSDIR/Firstlook_banner.bmp
  • $PLUGINSDIR/NEXT_off.bmp
  • $PLUGINSDIR/NEXT_on.bmp
  • $PLUGINSDIR/NO.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WB_Background.bmp
  • $PLUGINSDIR/WB_TRUSTe.bmp
  • $PLUGINSDIR/WB_up.bmp
  • $PLUGINSDIR/YES_on.bmp
  • $PLUGINSDIR/graphicalinstaller.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/linker.dll
    .dll windows:5 windows x86 arch:x86

    ecfc30d297c65075fc7d3aa46feca14c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pwgen.dll
    .dll windows:4 windows x86 arch:x86

    ff5d1f24996d7518c448de0ef89caf7f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/rk_banner.bmp
  • Uninstall.exe.nsis