General
- Target 1df83652c2ff87d8354c67761cc75af8_JaffaCakes118
- Size 858KB
- Sample240506-xw995aaa75
- SHA256 2fe6397cdcf6b9697ba2df281ef68e50f79f1000bbc58d9bbe60e71be4fc3d50
- MD5 1df83652c2ff87d8354c67761cc75af8
- SHA1 a506c9628185801d1f9880e867682cdde285d2c7
- SHA512 92b3c9eb1367b08747c01508671d87225bb18eedf2dc9542c6c6bc6a876baef905dbd48ab3f8164d3c480946096198888e419e3bd1191ecec89b5383f63e9367
- SSDEEP 24576:XoK9U9Z5Y4+YSembcj3jtpTm7bUDWzPuNML851cM9wAY:XoQU9Z5Y4+YSembcj3jjTcDuNML851cZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
1df83652c2ff87d8354c67761cc75af8_JaffaCakes118.exe
Resource
win7-20240215-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
1df83652c2ff87d8354c67761cc75af8_JaffaCakes118.exe
Resource
win10v2004-20240419-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 1df83652c2ff87d8354c67761cc75af8_JaffaCakes118
- Size 858KB
- SHA256 2fe6397cdcf6b9697ba2df281ef68e50f79f1000bbc58d9bbe60e71be4fc3d50
- MD5 1df83652c2ff87d8354c67761cc75af8
- SHA1 a506c9628185801d1f9880e867682cdde285d2c7
- SHA512 92b3c9eb1367b08747c01508671d87225bb18eedf2dc9542c6c6bc6a876baef905dbd48ab3f8164d3c480946096198888e419e3bd1191ecec89b5383f63e9367
- SSDEEP 24576:XoK9U9Z5Y4+YSembcj3jtpTm7bUDWzPuNML851cM9wAY:XoQU9Z5Y4+YSembcj3jjTcDuNML851cZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext