Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1a1871d24c9a060974d7ea8e1ee2f3be_JaffaCakes118
-
Size
60KB
-
Sample
240628-pjadzasakn
-
MD5
1a1871d24c9a060974d7ea8e1ee2f3be
-
SHA1
5cc14cd80cf0ff2b167d569f7abeaa4ad4edd263
-
SHA256
bb5883e8b4d6e8242a50addb4ac6e1f4e8b4773fc0ca60137efa37e18cb7651d
-
SHA512
eae61512c7bcfd138c1a9cfbe31522fb114472708daa1793f7333f88486f63828584fadcda744c50f2310f147723061ade6b562f8ff0b42d75db4da0a4716bf3
-
SSDEEP
1536:7m7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8YcdVuP:A+sVT45mn/bjni8DBebXNA8YuuP
Static task
static1
Behavioral task
behavioral1
Sample
1a1871d24c9a060974d7ea8e1ee2f3be_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a1871d24c9a060974d7ea8e1ee2f3be_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
1a1871d24c9a060974d7ea8e1ee2f3be_JaffaCakes118
-
Size
60KB
-
MD5
1a1871d24c9a060974d7ea8e1ee2f3be
-
SHA1
5cc14cd80cf0ff2b167d569f7abeaa4ad4edd263
-
SHA256
bb5883e8b4d6e8242a50addb4ac6e1f4e8b4773fc0ca60137efa37e18cb7651d
-
SHA512
eae61512c7bcfd138c1a9cfbe31522fb114472708daa1793f7333f88486f63828584fadcda744c50f2310f147723061ade6b562f8ff0b42d75db4da0a4716bf3
-
SSDEEP
1536:7m7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8YcdVuP:A+sVT45mn/bjni8DBebXNA8YuuP
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-