Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2c8ca337d3f57c127ce9fec4b8bde3d4_JaffaCakes118
-
Size
717KB
-
Sample
241009-hcl1vsygmq
-
MD5
2c8ca337d3f57c127ce9fec4b8bde3d4
-
SHA1
fbe37a0a779d5f009eec5d94edeee7a347ee1b28
-
SHA256
ee6cfa9cd7f3f9fe0759ebacf8f5fe4d848e9097737ae69ed083bd68d615c894
-
SHA512
66bff3a47c91e2df4091e592675afcdb223a8e2006a03d143e0c58ae2276b6ab754d6430ce3d22622ac52597035a028794e3723287f4631f828bed418bafd2a1
-
SSDEEP
12288:+c//////K4x2hhiyL0WYlTJPqFLTb6oIxSs6tnPnMZ8/ilgLZapFgDg9tKK2xumQ:+c//////K84L0WY5RSLTWoIx5+nfYVKU
Static task
static1
Behavioral task
behavioral1
Sample
2c8ca337d3f57c127ce9fec4b8bde3d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c8ca337d3f57c127ce9fec4b8bde3d4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2c8ca337d3f57c127ce9fec4b8bde3d4_JaffaCakes118
-
Size
717KB
-
MD5
2c8ca337d3f57c127ce9fec4b8bde3d4
-
SHA1
fbe37a0a779d5f009eec5d94edeee7a347ee1b28
-
SHA256
ee6cfa9cd7f3f9fe0759ebacf8f5fe4d848e9097737ae69ed083bd68d615c894
-
SHA512
66bff3a47c91e2df4091e592675afcdb223a8e2006a03d143e0c58ae2276b6ab754d6430ce3d22622ac52597035a028794e3723287f4631f828bed418bafd2a1
-
SSDEEP
12288:+c//////K4x2hhiyL0WYlTJPqFLTb6oIxSs6tnPnMZ8/ilgLZapFgDg9tKK2xumQ:+c//////K84L0WY5RSLTWoIx5+nfYVKU
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-