General
-
Target
00129112fcc4ed40a3d1610fe45b321f_JaffaCakes118
-
Size
276KB
-
Sample
240619-xpff6s1hql
-
MD5
00129112fcc4ed40a3d1610fe45b321f
-
SHA1
fc362343bfd60b0e4c0cc3d469583bd00da7c333
-
SHA256
45165b43c40d3e82e31498aff22b758655b551b591cf1c694830441d5fe587bc
-
SHA512
e697dce6c5224b6f6c9a44ae040c357e0329d0e5f130d1f57e8303746b4d4038891c163da0ce30fa367ec6f7356d737ec15f58d06aba467576c4ccd4bf9d0f8b
-
SSDEEP
6144:hAw6aRtH00JkxR2OTDLgewWSVTeU2lNhjH96PmEtTJG:h3fkDLge3ST52l/j96PRTU
Static task
static1
Behavioral task
behavioral1
Sample
00129112fcc4ed40a3d1610fe45b321f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
00129112fcc4ed40a3d1610fe45b321f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
00129112fcc4ed40a3d1610fe45b321f_JaffaCakes118
-
Size
276KB
-
MD5
00129112fcc4ed40a3d1610fe45b321f
-
SHA1
fc362343bfd60b0e4c0cc3d469583bd00da7c333
-
SHA256
45165b43c40d3e82e31498aff22b758655b551b591cf1c694830441d5fe587bc
-
SHA512
e697dce6c5224b6f6c9a44ae040c357e0329d0e5f130d1f57e8303746b4d4038891c163da0ce30fa367ec6f7356d737ec15f58d06aba467576c4ccd4bf9d0f8b
-
SSDEEP
6144:hAw6aRtH00JkxR2OTDLgewWSVTeU2lNhjH96PmEtTJG:h3fkDLge3ST52l/j96PRTU
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-