Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e763d73e87d52bbe02815ee9c8111798_JaffaCakes118
-
Size
471KB
-
Sample
241212-vkdqnsspaq
-
MD5
e763d73e87d52bbe02815ee9c8111798
-
SHA1
3d68044924a671a276a0bd57cf9ef1e7b5b43fe6
-
SHA256
dbdd5e9e5e80787d57555fad01b136b27ddb17d3fe99a8ed401ae7dbb8180c53
-
SHA512
c2786ac108602f31b4f2505b8eb9920affadd379a47df8587a8a8c4c0d22f7714cd9c907d9166109a7dfa4abeafdadf6f89b5767baecad2a8e1187e3ed8298b6
-
SSDEEP
6144:Hc0MYVrqlZ7/XjkNze4Rkk6/M97zLlzhu5RuyvP0BqsotP7wLoVdt2Ds3ZNr5t:HrDVrarINaM6/wObuyH6Y68t+MZN9
Static task
static1
Behavioral task
behavioral1
Sample
e763d73e87d52bbe02815ee9c8111798_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e763d73e87d52bbe02815ee9c8111798_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
e763d73e87d52bbe02815ee9c8111798_JaffaCakes118
-
Size
471KB
-
MD5
e763d73e87d52bbe02815ee9c8111798
-
SHA1
3d68044924a671a276a0bd57cf9ef1e7b5b43fe6
-
SHA256
dbdd5e9e5e80787d57555fad01b136b27ddb17d3fe99a8ed401ae7dbb8180c53
-
SHA512
c2786ac108602f31b4f2505b8eb9920affadd379a47df8587a8a8c4c0d22f7714cd9c907d9166109a7dfa4abeafdadf6f89b5767baecad2a8e1187e3ed8298b6
-
SSDEEP
6144:Hc0MYVrqlZ7/XjkNze4Rkk6/M97zLlzhu5RuyvP0BqsotP7wLoVdt2Ds3ZNr5t:HrDVrarINaM6/wObuyH6Y68t+MZN9
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-