Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b13b6e28e3e02a62d42c09aca347a56e_JaffaCakes118
-
Size
21KB
-
Sample
240820-27m17aybng
-
MD5
b13b6e28e3e02a62d42c09aca347a56e
-
SHA1
6c1f69df7b9895e3247e369ece09a2bb43570475
-
SHA256
a46f03ae4f900892f68811a37e0d87ed9ef37cf316e5afd2c27d82cba3deb008
-
SHA512
72d0b79404fa6a45714b1de77268c5a4dcf9b2d0707b1e5c6d7b7a2b269d94a780be829bfc497b4d4a2b60cccdcc6034a2de8408759880c4ad16572ce4cede0e
-
SSDEEP
192:syrNCkGOuZJUAy7A4afcKK79y0BZOoWxZokqUYJLGiliH2JFPEY52MnHVhMYngMX:syrNNGOul14PQtZ5ilvL5bgHOS37Zyg
Static task
static1
Behavioral task
behavioral1
Sample
b13b6e28e3e02a62d42c09aca347a56e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b13b6e28e3e02a62d42c09aca347a56e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b13b6e28e3e02a62d42c09aca347a56e_JaffaCakes118
-
Size
21KB
-
MD5
b13b6e28e3e02a62d42c09aca347a56e
-
SHA1
6c1f69df7b9895e3247e369ece09a2bb43570475
-
SHA256
a46f03ae4f900892f68811a37e0d87ed9ef37cf316e5afd2c27d82cba3deb008
-
SHA512
72d0b79404fa6a45714b1de77268c5a4dcf9b2d0707b1e5c6d7b7a2b269d94a780be829bfc497b4d4a2b60cccdcc6034a2de8408759880c4ad16572ce4cede0e
-
SSDEEP
192:syrNCkGOuZJUAy7A4afcKK79y0BZOoWxZokqUYJLGiliH2JFPEY52MnHVhMYngMX:syrNNGOul14PQtZ5ilvL5bgHOS37Zyg
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-