Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
32fe49aa0f2...18.exe
windows7-x64
72fe49aa0f2...18.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...c3.dll
windows7-x64
3$PLUGINSDI...c3.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PROGRAMFI...ll.exe
windows7-x64
7$PROGRAMFI...ll.exe
windows10-2004-x64
7General
-
Target
2fe49aa0f22ef5842fdb9af30f9f9d36_JaffaCakes118
-
Size
190KB
-
Sample
241009-m14m2axbrd
-
MD5
2fe49aa0f22ef5842fdb9af30f9f9d36
-
SHA1
696fad527a50c0a550eeb8119303b9a74d3b0541
-
SHA256
503be941a375cd412ed0116d25b9f03d1beffbe3a60dbf7cb65e8fd48dd3a2e8
-
SHA512
26e1f0b91f51c705fb73c38be8d59abd5696f1a4b8a9c9c6899fb827d0acf9f61d3577e0e50d5453cdfcce09aeb6debb431cde4820daeb79ee07021f42034b63
-
SSDEEP
3072:xLk395hYXJm45+whZyXUnRjy4wetX6tvsq3RVTZPsfI6R5d1ZoNbqUYP/wwd3:xQqM1wnAiRjtX6t1pUd1ZoNYP/fd3
Static task
static1
Behavioral task
behavioral1
Sample
2fe49aa0f22ef5842fdb9af30f9f9d36_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fe49aa0f22ef5842fdb9af30f9f9d36_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/EBanner.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/EBanner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/inetc3.dll
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/inetc3.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/linker.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/linker.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
$PROGRAMFILES/1ClickDownload/$PROGRAMFILES/1ClickDownload/uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
$PROGRAMFILES/1ClickDownload/$PROGRAMFILES/1ClickDownload/uninstall.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2fe49aa0f22ef5842fdb9af30f9f9d36_JaffaCakes118
-
Size
190KB
-
MD5
2fe49aa0f22ef5842fdb9af30f9f9d36
-
SHA1
696fad527a50c0a550eeb8119303b9a74d3b0541
-
SHA256
503be941a375cd412ed0116d25b9f03d1beffbe3a60dbf7cb65e8fd48dd3a2e8
-
SHA512
26e1f0b91f51c705fb73c38be8d59abd5696f1a4b8a9c9c6899fb827d0acf9f61d3577e0e50d5453cdfcce09aeb6debb431cde4820daeb79ee07021f42034b63
-
SSDEEP
3072:xLk395hYXJm45+whZyXUnRjy4wetX6tvsq3RVTZPsfI6R5d1ZoNbqUYP/wwd3:xQqM1wnAiRjtX6t1pUd1ZoNYP/fd3
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
$PLUGINSDIR/EBanner.dll
-
Size
5KB
-
MD5
cce7bc13dbc3faea7769fcf7727eb19f
-
SHA1
59633ed1adc02235ca058883534ff36be4fb3f37
-
SHA256
dd519ae6d7fd6df0c32db834df215df2fe7c1d044b800922a58da7f4f00b95ab
-
SHA512
21e4a8ecd383d59ef24f590367328248d21c7fe452fc5c3a42ec597f920e79caf6a8047babb9fb44d2cca8329dd7d14b39cf13a0934aee409fa5bdd7c2e4f121
-
SSDEEP
96:9agsHJMYSzHl+I3tFGLafz6Dy/qCWDIH7:9DspmHlv3Lnf0yiCmIH7
Score3/10 -
-
-
Target
$PLUGINSDIR/KillProcDLL.dll
-
Size
32KB
-
MD5
83142eac84475f4ca889c73f10d9c179
-
SHA1
dbe43c0de8ef881466bd74861b2e5b17598b5ce8
-
SHA256
ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
-
SHA512
1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
-
SSDEEP
384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
a5f8399a743ab7f9c88c645c35b1ebb5
-
SHA1
168f3c158913b0367bf79fa413357fbe97018191
-
SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
-
SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
-
SSDEEP
192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/inetc3.dll
-
Size
25KB
-
MD5
9d8ce05f532dc7b5742831ec8a63c2d8
-
SHA1
b014365f723c78a84bcdf8a46cfa016eb2b8dbc5
-
SHA256
fcc46c2e60931a76fe529a9fa5a85ba2f4bf7907d651161f92fc524ac4747982
-
SHA512
98f268bebf0c82d019873a7b109e1822011c0532e6a6d8ba94d2b8a918d9558f4db89100b6ee357c9c510ff56adc349e619489fd7e8d21e7f826877185ede3fe
-
SSDEEP
384:Aj+e6b0GUi0VV/0BiYkUm4i+Hr4Bc+AmPiMUTMF620Ac9khYLMkIX0+G2CykiDM:Aj+e6byNskUbi+Ly8xMSMj4
Score3/10 -
-
-
Target
$PLUGINSDIR/linker.dll
-
Size
6KB
-
MD5
8450b29ee8d592c208ba1aaf6ee50267
-
SHA1
75096da057bc85cef63bb0eec168652ea75cf618
-
SHA256
53aa57e582dc56421c1191a0a9efac9c36960b903b7d825f3b9682605ec2b612
-
SHA512
d23a3057053a1f36f5eb212ae0b09b9b0b41e50b8a6a20bbc46c12c51199ad0bca741bcce17534488158e8f2b9470dbdac2aa059688b7588a05778c40d461039
-
SSDEEP
48:q/XgJspkvsIWyuS3fyVLkmqbIWXGuDNcGo+FLtLFSfrPIk2vIhll:4gJsFIWjS3qVomqIixo+9tLFUr4vMl
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$PROGRAMFILES/1ClickDownload/$PROGRAMFILES/1ClickDownload/uninstall.exe
-
Size
46KB
-
MD5
1da83eb42e44745ba91d106d21e0ebc5
-
SHA1
1cf79804d65ab5b2c56150d30f23e363fcc9a962
-
SHA256
6a6b2acdbc2a20ac5cba17595a289ad696f570a14615bc3cfb2a89b28739222f
-
SHA512
8b7376d326b9929c944a49c5f8f4ccbfc5396b0e703cd0b33d4bacf5ba6be48e05a16dd184e42158cf24bbda8aef9bd9f0434d749a4be4554b5a4f6467c5047c
-
SSDEEP
768:+4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJagd2iZQAm6kRRS+NoJRnMtCJ:xLXB65939tY6HBg4sXJagdLeAyNDtjM
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-