Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d5f7dcba1f4b7b7659742305e4fcc41f_JaffaCakes118
-
Size
590KB
-
Sample
240909-kkdessscmd
-
MD5
d5f7dcba1f4b7b7659742305e4fcc41f
-
SHA1
4dac1f030d66273ee13934a5f9ec0ba1951847a2
-
SHA256
2ef7d74625d62840d77464481e128e0b2f835043852e08413716b7dbb5b1135a
-
SHA512
ce62e51fb7ae2cdd0f203dc0c3616814e7af298e6aa72584470f276081a2b626936872f2c5fdd28f5605fd9560614617f0c28e160f8d21db34418287e376d7d6
-
SSDEEP
12288:owDDh8iktuS3BuLr5+OWJSR4FktF3Z4mxx6hsV4AOwf7DGj7XQs:ow/6juSxuPUSKutQmXYYtfujJ
Static task
static1
Behavioral task
behavioral1
Sample
d5f7dcba1f4b7b7659742305e4fcc41f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d5f7dcba1f4b7b7659742305e4fcc41f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d5f7dcba1f4b7b7659742305e4fcc41f_JaffaCakes118
-
Size
590KB
-
MD5
d5f7dcba1f4b7b7659742305e4fcc41f
-
SHA1
4dac1f030d66273ee13934a5f9ec0ba1951847a2
-
SHA256
2ef7d74625d62840d77464481e128e0b2f835043852e08413716b7dbb5b1135a
-
SHA512
ce62e51fb7ae2cdd0f203dc0c3616814e7af298e6aa72584470f276081a2b626936872f2c5fdd28f5605fd9560614617f0c28e160f8d21db34418287e376d7d6
-
SSDEEP
12288:owDDh8iktuS3BuLr5+OWJSR4FktF3Z4mxx6hsV4AOwf7DGj7XQs:ow/6juSxuPUSKutQmXYYtfujJ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-