Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fb605224cc2cb3c39b6fc31898a26069_JaffaCakes118
-
Size
2.6MB
-
Sample
240928-dh3tcatdmr
-
MD5
fb605224cc2cb3c39b6fc31898a26069
-
SHA1
161fbd36a3804cff90ee2bbad37a134969402c08
-
SHA256
decaa2917bcaeff39ddd14b7dc79cd297da1d9af923fb3c62579320c7f7d316f
-
SHA512
591d8a42fc7b5ae16c5ac14383719551c765bc1b550eaa3e35446ae99c7d83645b0a9cdc90d19cc269d066c282526b4fde810e7810d78287546f6563b4de3c05
-
SSDEEP
49152:8S70LV4nzijOnCD3xH1BGCMb50Go5pC0w4GYrfquFGEZaA1QQdD0ZJtg:z7AkCD311Bd5C0zqD9A1vhMt
Static task
static1
Behavioral task
behavioral1
Sample
fb605224cc2cb3c39b6fc31898a26069_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
fb605224cc2cb3c39b6fc31898a26069_JaffaCakes118
-
Size
2.6MB
-
MD5
fb605224cc2cb3c39b6fc31898a26069
-
SHA1
161fbd36a3804cff90ee2bbad37a134969402c08
-
SHA256
decaa2917bcaeff39ddd14b7dc79cd297da1d9af923fb3c62579320c7f7d316f
-
SHA512
591d8a42fc7b5ae16c5ac14383719551c765bc1b550eaa3e35446ae99c7d83645b0a9cdc90d19cc269d066c282526b4fde810e7810d78287546f6563b4de3c05
-
SSDEEP
49152:8S70LV4nzijOnCD3xH1BGCMb50Go5pC0w4GYrfquFGEZaA1QQdD0ZJtg:z7AkCD311Bd5C0zqD9A1vhMt
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-