General
-
Target
04091207586e23b987cac2f1f4bb91f8_JaffaCakes118
-
Size
641KB
-
Sample
240620-jbljdazhmn
-
MD5
04091207586e23b987cac2f1f4bb91f8
-
SHA1
776304dd91c86245a6194d29a38ee4041249fd22
-
SHA256
7b022641c56e308799ef7bead45250ad096ce45dc43693fea9f111465fcf2650
-
SHA512
60421c8034bb1cf185a6984ae9c02657e39aa7a393bf98a387be5281e2cc28872b724470d624295b0a51d81106beb129a48f906781dd6e430d5f63a7593affd0
-
SSDEEP
12288:QMzDLuuChs/x51GZ84fXStCNjpRPLHqF3Z4mxxBg8HduAmSovUznZx1U:QMzDLu5s/T1p4fXAYDqQmXBgDhaxG
Static task
static1
Behavioral task
behavioral1
Sample
04091207586e23b987cac2f1f4bb91f8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04091207586e23b987cac2f1f4bb91f8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
04091207586e23b987cac2f1f4bb91f8_JaffaCakes118
-
Size
641KB
-
MD5
04091207586e23b987cac2f1f4bb91f8
-
SHA1
776304dd91c86245a6194d29a38ee4041249fd22
-
SHA256
7b022641c56e308799ef7bead45250ad096ce45dc43693fea9f111465fcf2650
-
SHA512
60421c8034bb1cf185a6984ae9c02657e39aa7a393bf98a387be5281e2cc28872b724470d624295b0a51d81106beb129a48f906781dd6e430d5f63a7593affd0
-
SSDEEP
12288:QMzDLuuChs/x51GZ84fXStCNjpRPLHqF3Z4mxxBg8HduAmSovUznZx1U:QMzDLu5s/T1p4fXAYDqQmXBgDhaxG
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-