Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
727fb410d5a...18.exe
windows7-x64
727fb410d5a...18.exe
windows10-2004-x64
7$PLUGINSDIR/17561.vbs
windows7-x64
1$PLUGINSDIR/17561.vbs
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDIR/SkinH.dll
windows7-x64
5$PLUGINSDIR/SkinH.dll
windows10-2004-x64
5$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/pcpc.vbs
windows7-x64
3$PLUGINSDIR/pcpc.vbs
windows10-2004-x64
3$PLUGINSDIR/run.vbs
windows7-x64
3$PLUGINSDIR/run.vbs
windows10-2004-x64
7$PLUGINSDI...��.exe
windows7-x64
3$PLUGINSDI...��.exe
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDIR/Inetc.dll
windows7-x64
3$PLUGINSDIR/Inetc.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Shell/Norm...le.dll
windows7-x64
1Shell/Norm...le.dll
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3General
-
Target
27fb410d5aa6711fdfb83052c703203f_JaffaCakes118
-
Size
1.6MB
-
Sample
241009-a6rjfazamd
-
MD5
27fb410d5aa6711fdfb83052c703203f
-
SHA1
bd3a79886d13837d1643227356946befcd488eb9
-
SHA256
2b49ca21dd645edd3d08709a68f205cc59bcc2a48b8b3ba49815fdceefbb1c4e
-
SHA512
b9681f68136ad3b7b95663b810b062cf198dedc5bd50d679dbc5883ff5feab9561d630e5b43e2da0401dad233088d8a7a5cdd024f1f57ffbe27ace642741a692
-
SSDEEP
24576:JS91TM/9KwQXJZcTufYgwDUuLKzY9IfKhV98ROv1enKEUdx3WO3TOHM3ISjaa:JCCVRQX/cSFwDEY9jhV8UELUdxWcTF7
Behavioral task
behavioral1
Sample
27fb410d5aa6711fdfb83052c703203f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27fb410d5aa6711fdfb83052c703203f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/17561.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/17561.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ButtonLinker.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ButtonLinker.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/SkinH.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/SkinH.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/pcpc.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/pcpc.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/run.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/run.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/Ϸ.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/Ϸ.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/Inetc.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/Inetc.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Shell/NormalColor/Shellstyle.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Shell/NormalColor/Shellstyle.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
uninst.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
uninst.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
27fb410d5aa6711fdfb83052c703203f_JaffaCakes118
-
Size
1.6MB
-
MD5
27fb410d5aa6711fdfb83052c703203f
-
SHA1
bd3a79886d13837d1643227356946befcd488eb9
-
SHA256
2b49ca21dd645edd3d08709a68f205cc59bcc2a48b8b3ba49815fdceefbb1c4e
-
SHA512
b9681f68136ad3b7b95663b810b062cf198dedc5bd50d679dbc5883ff5feab9561d630e5b43e2da0401dad233088d8a7a5cdd024f1f57ffbe27ace642741a692
-
SSDEEP
24576:JS91TM/9KwQXJZcTufYgwDUuLKzY9IfKhV98ROv1enKEUdx3WO3TOHM3ISjaa:JCCVRQX/cSFwDEY9jhV8UELUdxWcTF7
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/17561.vbs
-
Size
912B
-
MD5
2ac26956932b367d8f52cfc9dab33f81
-
SHA1
c156cc9273e8309dcc7ee7b32cf61d5e080fef67
-
SHA256
609cf60273fadbe4c80f8f49584af34fd9406ce266b827dde9ce968fad5b3f72
-
SHA512
e0f26874433e78d3c85186bc8808860dcd751d4bcdc674d9339fd1b4ced792c24d4618e68c7fa22b69200e7079fab18d93f74534fd075f2fbee2662375842f10
Score3/10 -
-
-
Target
$PLUGINSDIR/AdvSplash.dll
-
Size
6KB
-
MD5
13cc92f90a299f5b2b2f795d0d2e47dc
-
SHA1
aa69ead8520876d232c6ed96021a4825e79f542f
-
SHA256
eb1ca2b3a6e564c32677d0cdc388e26b74ef686e071d7dbca44d0bfa10488feb
-
SHA512
ff4e6e6e7104568fc85ef3a3f0494a5c7822a4ceaf65c584ad534f08f9a472a8d86f0a62f1f86343c61e2540b2254714b7ea43e4b312ff13d8271ff069386fa3
-
SSDEEP
96:6hNSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpPwoS:JXIpzTSd1BSk/kJtWpP
Score3/10 -
-
-
Target
$PLUGINSDIR/ButtonLinker.dll
-
Size
7KB
-
MD5
dd85ac7d85c92dd0e3cc17dfd4890f54
-
SHA1
a128fb7a05965c1a9913c6f5e419e6c4c0a7d2fa
-
SHA256
27abd2a4fb1bf66add60221b52d061bbe24d2d21e13600725ff7a5c6c777b504
-
SHA512
e4ff8216c65110a9d156f37c2062acb53a72daa8af12dfc24278920d9e1a4083a81b1446759df75405b2da34c7bfb1afc33184feedd0aee4ed73f79fcbb1a8a1
-
SSDEEP
96:q0GBDU3ADeEZlBLx6sWHCKGKVR3YXqNNtFa4PaaU4x:X53jEd2n3Y6NNtFBaa
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
325b008aec81e5aaa57096f05d4212b5
-
SHA1
27a2d89747a20305b6518438eff5b9f57f7df5c3
-
SHA256
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
-
SHA512
18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
-
SSDEEP
192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/SkinH.dll
-
Size
84KB
-
MD5
a00c474dc4ced90b8f5a692108c45dce
-
SHA1
e02722d30a6218523e9ddef287817788a4a9b9fc
-
SHA256
6504e515cbcf89cb98fd9f1a310125bfdf93e1f6a6bf0c64c0229e5670cac9b1
-
SHA512
e81b001379f94fabb71f1d6a019b81202e00da7338048b77d1728b40427689a32801419377d3e86c51c5e418cc3ccc328ee00adc69eaa575267bcaac8f477abd
-
SSDEEP
1536:uVNx6WNnPZ369Z3TCy5KcGhVek8Hvv144SNT7qgG7kQSeQmnouy8U:uVNx6WNnPZK9RTkieJw7uWoutU
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/pcpc.vbs
-
Size
910B
-
MD5
03e3b03acfb4900c61ec54c07e9a6834
-
SHA1
f6d1cb731fb3bc69ad2fad90874ab73895915aee
-
SHA256
a3d17e06945cd044a9b2a13dab8f4ca7d2f309bb564fbfcea5c1e570f82aff89
-
SHA512
19d59a1df2d6222dd685b2c5912d09b280fdcf134494f77d61923b233be5c5a7892262a514a4e38955ba2f8af1715be1340f7544e56668b0681014409ee64239
Score3/10 -
-
-
Target
$PLUGINSDIR/run.vbs
-
Size
128B
-
MD5
ef270d12f353b94df409fdf9e1dc7868
-
SHA1
46531b1f2bae7a7cc6dccad524943c6dcecf9219
-
SHA256
ab6539d229042f0e62871b4d5c8fa4900dd74f0d6b58ebf460649f872a5a24c1
-
SHA512
04ff9b1476749e4d711b9609ee84db93f1802159a778b2710bce089d2b11f0b377044f6cbfd556091d788d06674034d4b55544ff5047ff2d2c02a4ae3db4f8d7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
$PLUGINSDIR/Ϸ.exe
-
Size
70KB
-
MD5
339ea025e089399386696d1c3941e250
-
SHA1
606b345cdc0b9587b0603cca9e62737ae0a3eb9c
-
SHA256
070ff0d88fd01d7ddb9e2163c93120d75645c0f43ffd4e661d2cab9cd1ecd348
-
SHA512
11e2a1fbbcfab6a58351865bb0fb50e6e8891d428522450e39a4bc03e701bc1abf65eddfa1ea3e044467279e2b41dc7da03503308177bed682c8c5d3fc882605
-
SSDEEP
1536:Nf4exGDkeZ4mOoSgJEAJJh4Romu/BLohf6tk6NO1uWFO:F4eYZ4+1JXJJh45SBOZFO
Score3/10 -
-
-
Target
$PLUGINSDIR/BrandingURL.dll
-
Size
4KB
-
MD5
71c46b663baa92ad941388d082af97e7
-
SHA1
5a9fcce065366a526d75cc5ded9aade7cadd6421
-
SHA256
bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
-
SHA512
5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
Score3/10 -
-
-
Target
$PLUGINSDIR/Inetc.dll
-
Size
20KB
-
MD5
50fdadda3e993688401f6f1108fabdb4
-
SHA1
04a9ae55d0fb726be49809582cea41d75bf22a9a
-
SHA256
6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
-
SHA512
e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8
-
SSDEEP
384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781
-
SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f
-
SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
-
SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
-
SSDEEP
192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score3/10 -
-
-
Target
Shell/NormalColor/Shellstyle.dll
-
Size
353KB
-
MD5
cced53d9c7ae36dc10f82a5b73f65b53
-
SHA1
06e6918c94c5ee206a65f81381e9ed967e0d4b60
-
SHA256
474dfd4f9eefb07ad3f4d3faf061f677f6127ce41a7ad8a4648ade0b1fdad641
-
SHA512
4f42924a6df2c8174da51b12c3c3d2f1b2cba3bd90d211ff3c268f939e5eb49f175a4f6050535a53db24e136d18dd6d1d1e30d81342a688637bc50679002b215
-
SSDEEP
3072:YKc9J5aN67L0UMSQSQpXEeB8ZucsOjGGVWH10GC1HW5ZHpGh:oJ5aN67L0UMSlvUcseQ5ZHA
Score1/10 -
-
-
Target
uninst.exe
-
Size
376KB
-
MD5
765f54b192c4bf31c01fa469894034d9
-
SHA1
3d53eeaf5abab00b30402ec6947a9d2fad1207a8
-
SHA256
5a8202c253886c6ad5a4c626b72e4cdafc9075f8b8296829d1ff3aba4e7148f1
-
SHA512
b50d2b5b02eaad26ebeea66f1d1e4a3c71180a98619e1c80a536f3a289050d50fe884fc0023b4efc71d2cbd5fe4fea5f3fd9a03918d9e9ab6c5c67486493677f
-
SSDEEP
3072:lQIURTXJ+2WrSfqW4C3ZtmltDcFtlEesQgC5tM:lsc6qY3lEesQgCHM
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -