Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
828c0138edca9a11304bc7bf7ab290af_JaffaCakes118
-
Size
679KB
-
Sample
240802-b1q66asflg
-
MD5
828c0138edca9a11304bc7bf7ab290af
-
SHA1
2e3c88327c69f118b11d8e6e5ca983fc2376acff
-
SHA256
bba23179f61c9403ae3adfb643f7e8419d991b86419fadc0b0e6909eed1023fc
-
SHA512
cff128858b0c2f1c65f66d0830e2955e7c014913ed5196da1e52e1e9d8691df0ea7f7859a01d3752b7e63ea906beea50248212e2faa04ffcc9136715f5e2f053
-
SSDEEP
12288:G4cbLVs1ghOz/OUUejxK9ZmxTF3Z4mxxX/f7N3uHLpjXbHbzxY:4s15gZm5QmXX/f7NiLpjXbHbzxY
Static task
static1
Behavioral task
behavioral1
Sample
828c0138edca9a11304bc7bf7ab290af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
828c0138edca9a11304bc7bf7ab290af_JaffaCakes118.exe
Resource
win10v2004-20240730-en
Malware Config
Targets
-
-
Target
828c0138edca9a11304bc7bf7ab290af_JaffaCakes118
-
Size
679KB
-
MD5
828c0138edca9a11304bc7bf7ab290af
-
SHA1
2e3c88327c69f118b11d8e6e5ca983fc2376acff
-
SHA256
bba23179f61c9403ae3adfb643f7e8419d991b86419fadc0b0e6909eed1023fc
-
SHA512
cff128858b0c2f1c65f66d0830e2955e7c014913ed5196da1e52e1e9d8691df0ea7f7859a01d3752b7e63ea906beea50248212e2faa04ffcc9136715f5e2f053
-
SSDEEP
12288:G4cbLVs1ghOz/OUUejxK9ZmxTF3Z4mxxX/f7N3uHLpjXbHbzxY:4s15gZm5QmXX/f7NiLpjXbHbzxY
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-