Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
15f788bbcfa70c665bfa8853866a8e42_JaffaCakes118
-
Size
152KB
-
Sample
240627-penqsstanp
-
MD5
15f788bbcfa70c665bfa8853866a8e42
-
SHA1
a8ddf16580b00f7dffbc32e34c325d1344cb9d10
-
SHA256
e39266dfd2a6695471e4494e3e978152dfed0d7e5f049b72120f1ee4338eb82e
-
SHA512
a900de6c91d9426d038156a522f3f95815b382a827be61046a96804e9df3ec8ad9b7caaa44f8b22b3e300f7c109dfa5aa163d564d72143cc5a4765a3a0708360
-
SSDEEP
3072:wSzrlwFOM7qXzfr665oV4hImPx7IgBHUrbNb:w8rOFO/Df7oY9JsgB0rbR
Behavioral task
behavioral1
Sample
15f788bbcfa70c665bfa8853866a8e42_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15f788bbcfa70c665bfa8853866a8e42_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
15f788bbcfa70c665bfa8853866a8e42_JaffaCakes118
-
Size
152KB
-
MD5
15f788bbcfa70c665bfa8853866a8e42
-
SHA1
a8ddf16580b00f7dffbc32e34c325d1344cb9d10
-
SHA256
e39266dfd2a6695471e4494e3e978152dfed0d7e5f049b72120f1ee4338eb82e
-
SHA512
a900de6c91d9426d038156a522f3f95815b382a827be61046a96804e9df3ec8ad9b7caaa44f8b22b3e300f7c109dfa5aa163d564d72143cc5a4765a3a0708360
-
SSDEEP
3072:wSzrlwFOM7qXzfr665oV4hImPx7IgBHUrbNb:w8rOFO/Df7oY9JsgB0rbR
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-