Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

387104ccb2...18.exe

windows7-x64

7

387104ccb2...18.exe

windows10-2004-x64

7

$PLUGINSDIR/17561.vbs

windows7-x64

3

$PLUGINSDIR/17561.vbs

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/SkinH.dll

windows7-x64

5

$PLUGINSDIR/SkinH.dll

windows10-2004-x64

5

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/pcpc.vbs

windows7-x64

3

$PLUGINSDIR/pcpc.vbs

windows10-2004-x64

3

$PLUGINSDI...��.exe

windows7-x64

3

$PLUGINSDI...��.exe

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDIR/Inetc.dll

windows7-x64

3

$PLUGINSDIR/Inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Shell/Norm...le.dll

windows7-x64

1

Shell/Norm...le.dll

windows10-2004-x64

1

Shell/Norm...le.dll

windows7-x64

1

Shell/Norm...le.dll

windows10-2004-x64

1

en-US/�...��.dll

windows7-x64

1

en-US/�...��.dll

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    387104ccb2d36d672ecbc082e7a68bf7_JaffaCakes118

  • Size

    1.9MB

  • Sample

    241012-e7sv4steja

  • MD5

    387104ccb2d36d672ecbc082e7a68bf7

  • SHA1

    e54e881036e20f913024c36a452fb200a7eeb72c

  • SHA256

    ad766d035f625ba652513e2867faf90806c9f0c3048174e24f736d05fe9f6f0f

  • SHA512

    25e7729e916ccedb52ad4ac628c830cd9e94df28560cb7f87699dc4623e6d78a29f251611d20e421d7638426fbf9f77c8d2d6e33eb01a75f530ee98690888543

  • SSDEEP

    49152:zR5XAwxyIXxwtPVF4lH3zWqiDOMP68pIygHFNd:vLxMF4AqPMpIygLd

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      387104ccb2d36d672ecbc082e7a68bf7_JaffaCakes118

    • Size

      1.9MB

    • MD5

      387104ccb2d36d672ecbc082e7a68bf7

    • SHA1

      e54e881036e20f913024c36a452fb200a7eeb72c

    • SHA256

      ad766d035f625ba652513e2867faf90806c9f0c3048174e24f736d05fe9f6f0f

    • SHA512

      25e7729e916ccedb52ad4ac628c830cd9e94df28560cb7f87699dc4623e6d78a29f251611d20e421d7638426fbf9f77c8d2d6e33eb01a75f530ee98690888543

    • SSDEEP

      49152:zR5XAwxyIXxwtPVF4lH3zWqiDOMP68pIygHFNd:vLxMF4AqPMpIygLd

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/17561.vbs

    • Size

      912B

    • MD5

      2ac26956932b367d8f52cfc9dab33f81

    • SHA1

      c156cc9273e8309dcc7ee7b32cf61d5e080fef67

    • SHA256

      609cf60273fadbe4c80f8f49584af34fd9406ce266b827dde9ce968fad5b3f72

    • SHA512

      e0f26874433e78d3c85186bc8808860dcd751d4bcdc674d9339fd1b4ced792c24d4618e68c7fa22b69200e7079fab18d93f74534fd075f2fbee2662375842f10

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/AdvSplash.dll

    • Size

      6KB

    • MD5

      a1bba35c752b36f575350cb7ddf238e4

    • SHA1

      9603b691ae71d4fbc7a14dbb837bd97cecac8aab

    • SHA256

      0667863d71a3021ab844069b6dd0485f874bf638af478ab11c6fb8b7d6c834b6

    • SHA512

      eb5d3498dd994bec42a437cf91343665d3c35bfe3f6277a7393af6a0b8348772c3166d9be48955edddf6ef79fa508ec8d4f96d7d5df37ecdc52c90042e0a2967

    • SSDEEP

      96:6ONSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpiwoS:sXIpzTSd1BSk/kJtWpi

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/ButtonLinker.dll

    • Size

      7KB

    • MD5

      dd85ac7d85c92dd0e3cc17dfd4890f54

    • SHA1

      a128fb7a05965c1a9913c6f5e419e6c4c0a7d2fa

    • SHA256

      27abd2a4fb1bf66add60221b52d061bbe24d2d21e13600725ff7a5c6c777b504

    • SHA512

      e4ff8216c65110a9d156f37c2062acb53a72daa8af12dfc24278920d9e1a4083a81b1446759df75405b2da34c7bfb1afc33184feedd0aee4ed73f79fcbb1a8a1

    • SSDEEP

      96:q0GBDU3ADeEZlBLx6sWHCKGKVR3YXqNNtFa4PaaU4x:X53jEd2n3Y6NNtFBaa

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/SkinH.dll

    • Size

      84KB

    • MD5

      a00c474dc4ced90b8f5a692108c45dce

    • SHA1

      e02722d30a6218523e9ddef287817788a4a9b9fc

    • SHA256

      6504e515cbcf89cb98fd9f1a310125bfdf93e1f6a6bf0c64c0229e5670cac9b1

    • SHA512

      e81b001379f94fabb71f1d6a019b81202e00da7338048b77d1728b40427689a32801419377d3e86c51c5e418cc3ccc328ee00adc69eaa575267bcaac8f477abd

    • SSDEEP

      1536:uVNx6WNnPZ369Z3TCy5KcGhVek8Hvv144SNT7qgG7kQSeQmnouy8U:uVNx6WNnPZK9RTkieJw7uWoutU

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/pcpc.vbs

    • Size

      910B

    • MD5

      03e3b03acfb4900c61ec54c07e9a6834

    • SHA1

      f6d1cb731fb3bc69ad2fad90874ab73895915aee

    • SHA256

      a3d17e06945cd044a9b2a13dab8f4ca7d2f309bb564fbfcea5c1e570f82aff89

    • SHA512

      19d59a1df2d6222dd685b2c5912d09b280fdcf134494f77d61923b233be5c5a7892262a514a4e38955ba2f8af1715be1340f7544e56668b0681014409ee64239

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/Ϸ.exe

    • Size

      70KB

    • MD5

      339ea025e089399386696d1c3941e250

    • SHA1

      606b345cdc0b9587b0603cca9e62737ae0a3eb9c

    • SHA256

      070ff0d88fd01d7ddb9e2163c93120d75645c0f43ffd4e661d2cab9cd1ecd348

    • SHA512

      11e2a1fbbcfab6a58351865bb0fb50e6e8891d428522450e39a4bc03e701bc1abf65eddfa1ea3e044467279e2b41dc7da03503308177bed682c8c5d3fc882605

    • SSDEEP

      1536:Nf4exGDkeZ4mOoSgJEAJJh4Romu/BLohf6tk6NO1uWFO:F4eYZ4+1JXJJh45SBOZFO

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/Inetc.dll

    • Size

      20KB

    • MD5

      50fdadda3e993688401f6f1108fabdb4

    • SHA1

      04a9ae55d0fb726be49809582cea41d75bf22a9a

    • SHA256

      6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6

    • SHA512

      e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8

    • SSDEEP

      384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      Shell/NormalColor/en-US/shellstyle.dll.mui

    • Size

      120KB

    • MD5

      2dc89df65dc20224e2c53d1d9d86141c

    • SHA1

      23bf88f8b3cd94fc1e50dc4437f9e8a054b83e61

    • SHA256

      a38bcfda2b5ce1d8186ec845675ceddefc887e9c2905e2bf339a3b7d7831835f

    • SHA512

      a6ccc7c74c1614e3b6659aec02980b361433434b819c85584c3ddba487ba1e0436f041f8a0e8ecd600b88e407e50e43f147c4546929877d2eed45ce80cb4e577

    • SSDEEP

      1536:aXXo21vTvg1K896wMe2CnFyCdKPFpeDDD9g+ZZC4JGo:aX5cKgwe26sC4+S4f

    Score
    1/10
    behavioral25behavioral26

    • Target

      Shell/NormalColor/shellstyle.dll

    • Size

      342KB

    • MD5

      181f47ef986b538abd84368e7a8dff69

    • SHA1

      73a165c872250f1ce4e9b41d11b9e7c0b8107dae

    • SHA256

      e674efd4d607ab3be565221a2e9b713dc349b7fb118685230e82c8d4de9f0add

    • SHA512

      fcf0021b9be88cb0cefde9629d2a22910dcc9bd5fd9b20e553f8e8048c49cb52da7b3d47f8b70cd59cac8e77adad7f154bb61085c97ceb5f26d2b3fa60ad8271

    • SSDEEP

      6144:V9EKEHEWEYErEVEXEJT3TbTZ/cb9cChIJ:i/cb9cV

    Score
    1/10
    behavioral27behavioral28

    • Target

      en-US/Զ.mui

    • Size

      4KB

    • MD5

      01e1a7d92b2c6826f8fe5d9dae1cd207

    • SHA1

      33686039fc7dcb015b6fef57fe0b37114aa07c9e

    • SHA256

      b879b3a8662e8f50809e6d1488fb97504ee896f146bd7c12c05968a3ee4df71b

    • SHA512

      ecd10ffe9e2e2dc946b66434d75dc81b516d4202b30a03f4e3ef0aafeecef38082852cc0fb7e60773dc5237aeaf52d15c6490064ba803f018e88b63cdac5ef5a

    Score
    1/10
    behavioral29behavioral30

    • Target

      uninst.exe

    • Size

      376KB

    • MD5

      e912a6ed3832be1d40f3aa5a925d97bf

    • SHA1

      08dccfe1bbe4f104613eb6822aea486812e5e4ee

    • SHA256

      2109e062e3fd01c5f578df3c4f881087f0ab41cd287036005b05589e81156d19

    • SHA512

      7e17f79fb572d6c449e7a8d37d72b16e3150f2aeaa8a86c1910e65632154e26e7f28070bd4392bfc8fbcfc6ecfb004267f9b374884cf3cd36f647f1c1df71bc1

    • SSDEEP

      3072:k3c1fP4AJJT2WrSfqW4C3ZtmltDcFtlEesjdQ317NL:mOPjH6qY3lEesQDL

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discoveryupx
Score
7/10

behavioral2

discoveryupx
Score
7/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discoveryupx
Score
5/10

behavioral12

discoveryupx
Score
5/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

discovery
Score
7/10

behavioral32

discovery
Score
7/10