Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e0215c22250ea3756ed1469479e4fc43_JaffaCakes118

  • Size

    3.8MB

  • MD5

    e0215c22250ea3756ed1469479e4fc43

  • SHA1

    136a0f200a8614e9c54ae4ce9b115175d2b502ea

  • SHA256

    a3493f39327e7cfb172453dac5dea46e625a193adb92feab5ac0225017d28dad

  • SHA512

    98b404f33f70e51df1018cfdda78d76f7bf664aac2ac42c46e5a16812f31e522a8f985b48cc386426f98fdd56def7d834518644a3d51f4f4c4009d0f9be5d7d4

  • SSDEEP

    98304:VZD2EIEGhl+ZZqhGAQfBIqtO/ZIpBrfh7qC3q9:Vx2EIEGhIZAhQfBIf6phZ7qCm

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e0215c22250ea3756ed1469479e4fc43_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    36276e7c12820586c6f4cfea7e3f74d2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ATT06209.txt
  • Analizador.dll
    .dll windows:4 windows x86 arch:x86

    fc5a289328bf3325953cdc7175929be7


    Headers

    Imports

    Exports

    Sections

  • Ayuda.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • E-mail_Marketing.exe
    .exe windows:4 windows x86 arch:x86

    0d7f821a3a6dfd2fdf536bfced994e4f


    Headers

    Imports

    Exports

    Sections

  • E-mail_Marketing.exe.manifest
    .xml
  • Extractor.exe
    .exe windows:4 windows x86 arch:x86

    1a909fec9bdcf69eef2d4db2630bde58


    Headers

    Imports

    Sections

  • Seguridad.dll
    .dll windows:4 windows x86 arch:x86

    385ed2996782f4982ef1b2e4da5058ce


    Headers

    Imports

    Exports

    Sections

  • Servidor_em.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Servidor_em.exe.manifest
    .xml
  • Servidor_em.opt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    36276e7c12820586c6f4cfea7e3f74d2


    Headers

    Imports

    Sections