Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
37dbbc9ede3ecbdedabb6b205bdd89d3_JaffaCakes118
-
Size
276KB
-
Sample
240711-f36f3stdle
-
MD5
37dbbc9ede3ecbdedabb6b205bdd89d3
-
SHA1
062e91fc7375217f160eb5263d2b3630877c875c
-
SHA256
a59503e9fff2e3c699693044935970da04678075bb05dfcfd4de1fe3d54939d5
-
SHA512
7028a05cb322a37885112a8f334b9bdc1edfb0a740d974ecf5a3d65874cee1b17872b3085cac342b9085353427c9c0ada17d4e68139d8c6d4a288cf434d9a954
-
SSDEEP
6144:pWL00gtoGcdeDCFgmYmzyoLLoUz7+wgW6fMJ9iVJjNuUM7Pq27d9fvUA:j0gydeQxVXw7wgW6fMJEVJcXPqgd9Hf
Static task
static1
Behavioral task
behavioral1
Sample
37dbbc9ede3ecbdedabb6b205bdd89d3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37dbbc9ede3ecbdedabb6b205bdd89d3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
37dbbc9ede3ecbdedabb6b205bdd89d3_JaffaCakes118
-
Size
276KB
-
MD5
37dbbc9ede3ecbdedabb6b205bdd89d3
-
SHA1
062e91fc7375217f160eb5263d2b3630877c875c
-
SHA256
a59503e9fff2e3c699693044935970da04678075bb05dfcfd4de1fe3d54939d5
-
SHA512
7028a05cb322a37885112a8f334b9bdc1edfb0a740d974ecf5a3d65874cee1b17872b3085cac342b9085353427c9c0ada17d4e68139d8c6d4a288cf434d9a954
-
SSDEEP
6144:pWL00gtoGcdeDCFgmYmzyoLLoUz7+wgW6fMJ9iVJjNuUM7Pq27d9fvUA:j0gydeQxVXw7wgW6fMJEVJcXPqgd9Hf
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-