Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3ef4d5740e0...18.exe
windows7-x64
7ef4d5740e0...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$TEMP/spltmp.exe
windows7-x64
1$TEMP/spltmp.exe
windows10-2004-x64
3Mwic_32.dll
windows7-x64
3Mwic_32.dll
windows10-2004-x64
3POS58/pos5...DD.dll
windows7-x64
3POS58/pos5...DD.dll
windows10-2004-x64
3POS58/pos5...UI.dll
windows7-x64
3POS58/pos5...UI.dll
windows10-2004-x64
3POS58/pos5...58.dll
windows7-x64
3POS58/pos5...58.dll
windows10-2004-x64
3POS58/pos5...OR.dll
windows7-x64
1POS58/pos5...OR.dll
windows10-2004-x64
1POS58/pos5...IB.dll
windows7-x64
1POS58/pos5...IB.dll
windows10-2004-x64
1POS58/pos5...RV.dll
windows7-x64
1POS58/pos5...RV.dll
windows10-2004-x64
1RWic.dll
windows7-x64
3RWic.dll
windows10-2004-x64
3mpok.exe
windows7-x64
5mpok.exe
windows10-2004-x64
5readme.htm
windows7-x64
3readme.htm
windows10-2004-x64
3uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7General
-
Target
ef4d5740e0152c792d763c4053d4e861_JaffaCakes118
-
Size
3.5MB
-
Sample
240921-h3bb2s1app
-
MD5
ef4d5740e0152c792d763c4053d4e861
-
SHA1
7287802b40e87e93e444cc72d6e4857454ac503b
-
SHA256
4c6fa8e3c0514082d364d995f157d5f4b3d9f2339aed47006eae23fe3025f530
-
SHA512
d79f1c9ad2216f67b930a1c36f9d306fa29c98abeb13dd8f5999cc31bae839ed1153d9161a9eb18211361af613c4e585e604243735fe342ce9ddca912de9fd0a
-
SSDEEP
49152:fpJqZcTjVVZJRjDhQzfTKbf1uR/L3eiFD0ENV9JZ5QLX5qoEFZpA1yVL:fnqE1h6bKgR/ztz98pqoEFvayVL
Static task
static1
Behavioral task
behavioral1
Sample
ef4d5740e0152c792d763c4053d4e861_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef4d5740e0152c792d763c4053d4e861_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$TEMP/spltmp.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$TEMP/spltmp.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Mwic_32.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Mwic_32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
POS58/pos58_2000_xp/I386/RASDD.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
POS58/pos58_2000_xp/I386/RASDD.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
POS58/pos58_2000_xp/I386/RASDDUI.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
POS58/pos58_2000_xp/I386/RASDDUI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
POS58/pos58_2000_xp/POS58.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
POS58/pos58_2000_xp/POS58.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
POS58/pos58_win98/DMCOLOR.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
POS58/pos58_win98/DMCOLOR.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
POS58/pos58_win98/ICONLIB.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
POS58/pos58_win98/ICONLIB.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
POS58/pos58_win98/UNIDRV.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
POS58/pos58_win98/UNIDRV.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
RWic.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
RWic.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
mpok.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
mpok.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
readme.htm
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
readme.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
uninst.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
uninst.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ef4d5740e0152c792d763c4053d4e861_JaffaCakes118
-
Size
3.5MB
-
MD5
ef4d5740e0152c792d763c4053d4e861
-
SHA1
7287802b40e87e93e444cc72d6e4857454ac503b
-
SHA256
4c6fa8e3c0514082d364d995f157d5f4b3d9f2339aed47006eae23fe3025f530
-
SHA512
d79f1c9ad2216f67b930a1c36f9d306fa29c98abeb13dd8f5999cc31bae839ed1153d9161a9eb18211361af613c4e585e604243735fe342ce9ddca912de9fd0a
-
SSDEEP
49152:fpJqZcTjVVZJRjDhQzfTKbf1uR/L3eiFD0ENV9JZ5QLX5qoEFZpA1yVL:fnqE1h6bKgR/ztz98pqoEFvayVL
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
4c7d97d0786ff08b20d0e8315b5fc3cb
-
SHA1
bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
-
SHA256
75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
-
SHA512
f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
-
SSDEEP
192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
Score3/10 -
-
-
Target
$TEMP/spltmp.exe
-
Size
3KB
-
MD5
4309709918dfd62cb3688b21bd5da293
-
SHA1
c568d498b5421128d99caaa7f5626e79e624f540
-
SHA256
3878d20e425de5cb7765b6a65869253ba96932e7d0d29e39e4bb2b20eb13fcb7
-
SHA512
7571f3d1b454100c8a2081cd1c2d15764aedfe131256df12dee47da602af9b09d2ba717572502a450f2dd9940ffad4610effebd46816a856c49d72117a752962
Score3/10 -
-
-
Target
Mwic_32.dll
-
Size
172KB
-
MD5
8cec16f685a11d0bc4df581fa75a957d
-
SHA1
d404b5d4ae873ef82d107dc47e809dea05e15d58
-
SHA256
0e811f22887ad9eda7ea2370c02fa32e71116c86ee7d408ffa3a3f68da0a2471
-
SHA512
423b052b4f993806b90b5d412beadbc07dc1f2fec5bb71e7301df2eb0a02f9572cdf6dac479af4df2458fa78afbd7b02e8148e22e6f0de59fd21b668489b4908
-
SSDEEP
3072:f7qs0DOV8MTId5gD50FfEWTwAw9cJ/pDonpk:Dqs0DOV8To0fEW0/9cJ/Ok
Score3/10 -
-
-
Target
POS58/pos58_2000_xp/I386/RASDD.DLL
-
Size
425KB
-
MD5
d187053be3d5afe38b14bd80e1284997
-
SHA1
b765496c4cedb7d0fec79cdc73da130dccfa6313
-
SHA256
e0709dd910e84b38ce11ee141f1e21061eb48484a8356c4b012f3f5572fe40d8
-
SHA512
f98100eb114789f4397126fb9cd3e98fecfe68cad981a88640447a71dfa2133514e15d2d8e6f480d251654b4fc0507a6b5d4af7e3bb48f4717b42491b042230d
-
SSDEEP
12288:f0ortbP0Hd3EnD5IBaqGE2z4UYksDWVcToX:MortT+d3EnNIKt4UIqcTo
Score3/10 -
-
-
Target
POS58/pos58_2000_xp/I386/RASDDUI.DLL
-
Size
80KB
-
MD5
cf88e3e16b1b96a91b8ce807045665d8
-
SHA1
c5d5c9b950f36360755adf6484f9888c7f156b56
-
SHA256
fd8653846fa5587c6aca6ca00357d8a0ff2d711d74cc8129540a552557b14219
-
SHA512
6f0f4e5820b8e0b76582dbe4fc6c1914e39a83939150f3dee7ab45454aaf9f6a2af403a817f0ee1a67db30a4e212ede3efec31fd9b9d3b4c3f029e4b8e0003f2
-
SSDEEP
1536:KRJb5V4cHz98X3md6qdhtVZW7vOki608MbNjcKfCgpJwiKupY+aLSfMy959g1LY:c3V9VThzkndM60wibY3Uw
Score3/10 -
-
-
Target
POS58/pos58_2000_xp/POS58.DLL
-
Size
20KB
-
MD5
2dfaafa80d8c6a7b26050186d1a5ec2d
-
SHA1
8dafce2a55563a094eb90aae2ddb555995980aa7
-
SHA256
5a0e9c04809ec6a26cbc2c1bb62a04300d650442ea3014d2a755379269c00893
-
SHA512
4603ccad20756cb78dee904472c9475d4fed05e3002c4764510c59d1ed053f897725596cb7f332e199f5e4346a6b6f550ca93bd192ada13ee464e8ce8113cce6
-
SSDEEP
192:jhoYWS4Wx7IR8oDVYiU1UqwUqTj4O7UlfMrEfgcgBlFqpk7jVZqbdu8kHUfHwGs9:jhnWS4Wx7YDgPqTsOwZYo67BmTsZnVK0
Score3/10 -
-
-
Target
POS58/pos58_win98/DMCOLOR.DLL
-
Size
17KB
-
MD5
a4325003c6cb7b4632654c4b8950ce4a
-
SHA1
f13e9afcc9d1d8592f26ca08c14924c7220f9bc7
-
SHA256
1de3922cb0c94a73d83ce47c2b873ce5b9028428b38ebc9a392411b82d37a469
-
SHA512
f51d34330218810e660da2528c7afe7ffeee718d09af7e3491ee9c6180b079056c4458517d5d4d9f7d6ef180d64de10db8269fbc5e969a647acf1f4e3f08bbd2
-
SSDEEP
384:HA6qa+InnSt61TR3PonbfJ4E0PGm/8jShGCmF0p8vD2huCQ5dhF06K1t:Hvq8nx1TR3EmEClhGCm6avD2hHQvhZK
Score1/10 -
-
-
Target
POS58/pos58_win98/ICONLIB.DLL
-
Size
118KB
-
MD5
ed70efd441caa9f6ad185f4c15e490f4
-
SHA1
f26dfde70f3987f175d18851877cfb38dfed74dd
-
SHA256
a2451d2ee6636076705d272d311dda7978008d53f9941accb99a7fc1a976c3b6
-
SHA512
cd7f5d9a7c0a3aa998cfab8292a57fb0e517f4d2998d5c7ef36c0f93d561abbc47c0395b1d0927e4f014b95b76eb91deed6a622cf13ae128646e4a80cbd328d8
-
SSDEEP
384:d2yOapglcAH9vg55zs935xZxO5XAXtI/dSK5IkSkkBkd5555555555555555555G:dZOR6YvpO2jCjfyl
Score1/10 -
-
-
Target
POS58/pos58_win98/UNIDRV.DLL
-
Size
208KB
-
MD5
39d544cce2ed3dba9858b9e513409d2e
-
SHA1
20d8d9bb9b647564af79a2cf352d44aa8c7df088
-
SHA256
dba11943e0fd8018bf474f5df7c459d741515fd4bd0e2b4b1b79ecaa144b3e1b
-
SHA512
7ef081e2b45291c6dbdf66160320e0bf9d2bd7a3d4faf7369b6ba6901f19cf756816e50e50afa8a2694bac2cac17c86eb2f1ae013f328ec08971ca04ff439744
-
SSDEEP
6144:KduLei8gf2Zt6/Rml2Tklr/PK4Hl6bt9Z+cLNNTlSJm9BS:MuLei8gf2Zt6/R82GLPK4F6btZhNpSIy
Score1/10 -
-
-
Target
RWic.dll
-
Size
287KB
-
MD5
25d6489b7deeac1cf38ef2d62a8fe433
-
SHA1
54594e79534ec4000d5d5a86fd68cf18b0feca01
-
SHA256
1678a564785ea7e1ff7164d6752706aec1aa0cc1e115ee7e0864b6932daeee0c
-
SHA512
3aa75b7eb71882a6ce694540a2d4330b988d5d41d7bade71da4463f98825dca056d13c1e07cd37460e69175614c23df2be5347b4610b186b82c6b5fb53d13f57
-
SSDEEP
6144:js1/IYrUqsU07McLcxBOVwg/mvDHysUejWa4Zt6gshKEZ1OQmNBmDq1bI/df:js1/IYo5UTCcxBOV+vxHjWaqshKEvOQB
Score3/10 -
-
-
Target
mpok.exe
-
Size
1.8MB
-
MD5
2328c72d32da72f31b51d0797cb9ccaf
-
SHA1
5cd63580b5347d3fb867cb247906d046d606832b
-
SHA256
883f5c8fad45aaf1c3d3576674592a8ea73040dd156dc6b5413ae2a3a147d9a9
-
SHA512
3015172e34ab7ba5615fad97e5d7aee496e06e857fa75b194398a88a33c5430e6c04e2c5d6152eecfac4ac85b0faa01c3e34bf9e1e89fd61148143ed0a99ae68
-
SSDEEP
49152:o9IeX5F/R/o6/cx4AGMKPMqV43Jf4Ms9MZJkjF:cz/R/oOAE0qgJf14M6F
Score5/10-
Drops file in System32 directory
-
-
-
Target
readme.htm
-
Size
44KB
-
MD5
5eac17e3fb90fd6a909dc0082c8408de
-
SHA1
42576a8cadc9759cbbfdf7bb8c4f90c1cb5a6fa7
-
SHA256
aa874f47528ae751345d9130c9028ca2dcf03138e3152a3ae0c5b320b52da932
-
SHA512
23063ad1777846c5723baa6e683b2129cd5ada2aa03d77b518bb781c02f754ae587e5859f2d9d05e487c5866ab778df2e9de6ffb1475665cc412b491e616a705
-
SSDEEP
768:zgb/lhrT4n/PXX2lLPsPeJhdkemlIdYrQZ7RLu:zShKPXmlzKeJhue0kzRRi
Score3/10 -
-
-
Target
uninst.exe
-
Size
49KB
-
MD5
41f7e5a63008dcf37777d36f298896c1
-
SHA1
b3848df73759c0e3a96c91354212820900d8b35d
-
SHA256
d1e044e46ddc6e6a9a81690eb9a6594184b4245ab69cd1de7005946eb775f02d
-
SHA512
dcafd9ebd98b323dc40857c0715d65b7cfc108cad0a5736058c132223976676e0a95a8fe3f58856a58a26813db6c3284b81cf73e34ef76d68a661c3fb97b566c
-
SSDEEP
768:uh03BWfzcJpdd4jU3eRo8rwV0GfL7rtU7UMt3MBJjwWQDk6X22m7rH:uh03grsyj5Rk0gtUABJ/QPX22O
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-