General
- Target ea1028d51351ab6846ebba118883f6f2_JaffaCakes118
- Size 43KB
- Sample240409-qfepysbb2z
- SHA256 d585e9fef9400725389a6dab42673766e2b53db9fd79fb0420e5addb7a4bda36
- MD5 ea1028d51351ab6846ebba118883f6f2
- SHA1 eeee40c8300f8d6dc94367a46fed401b5716365a
- SHA512 18169a5cf27c4081307781476535f2a4237abf65fbc393054ce3496a8fb6064d4226f985e242f3dbdd7c2d54c472be0cb446e6ba77c3e24aae4188ca6beee082
- SSDEEP 768:pwwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pEUNBwVM1hGs1UWG2lA:U4jqi5axwdrPp1N6VMus12
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
ea1028d51351ab6846ebba118883f6f2_JaffaCakes118.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ea1028d51351ab6846ebba118883f6f2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target ea1028d51351ab6846ebba118883f6f2_JaffaCakes118
- Size 43KB
- SHA256 d585e9fef9400725389a6dab42673766e2b53db9fd79fb0420e5addb7a4bda36
- MD5 ea1028d51351ab6846ebba118883f6f2
- SHA1 eeee40c8300f8d6dc94367a46fed401b5716365a
- SHA512 18169a5cf27c4081307781476535f2a4237abf65fbc393054ce3496a8fb6064d4226f985e242f3dbdd7c2d54c472be0cb446e6ba77c3e24aae4188ca6beee082
- SSDEEP 768:pwwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pEUNBwVM1hGs1UWG2lA:U4jqi5axwdrPp1N6VMus12
- MD5 SHA1 SHA512 SSDEEP
Score10/10ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
ModiLoader Second Stage
Suspicious use of SetThreadContext