Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ba55a0fbd384dd9f0f91334ccbf65b21_JaffaCakes118
-
Size
60KB
-
Sample
240823-exy95svejf
-
MD5
ba55a0fbd384dd9f0f91334ccbf65b21
-
SHA1
8658a2c9987e2a9288e0fc255eba6cc53f9c8be7
-
SHA256
738ba18a63893577c8d7729d81b869c3ba2cac605b4e26dc5ca351fcd575f2aa
-
SHA512
8bafeff37436f22a8f62073f409ce46ebdc361da0719d70fc5c5eee6ade4f9c0754c153ac2a7fd56fea3ac99aa5973c6384e2c331897dea887b3b243193db18d
-
SSDEEP
1536:gm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8UcdVRe7:b+sVT45mn/bjni8DBebXNA8UuQ7
Static task
static1
Behavioral task
behavioral1
Sample
ba55a0fbd384dd9f0f91334ccbf65b21_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba55a0fbd384dd9f0f91334ccbf65b21_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ba55a0fbd384dd9f0f91334ccbf65b21_JaffaCakes118
-
Size
60KB
-
MD5
ba55a0fbd384dd9f0f91334ccbf65b21
-
SHA1
8658a2c9987e2a9288e0fc255eba6cc53f9c8be7
-
SHA256
738ba18a63893577c8d7729d81b869c3ba2cac605b4e26dc5ca351fcd575f2aa
-
SHA512
8bafeff37436f22a8f62073f409ce46ebdc361da0719d70fc5c5eee6ade4f9c0754c153ac2a7fd56fea3ac99aa5973c6384e2c331897dea887b3b243193db18d
-
SSDEEP
1536:gm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8UcdVRe7:b+sVT45mn/bjni8DBebXNA8UuQ7
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-