General
- Target 0453e377af0cc62edba4bbfc9b6a2d33_JaffaCakes118
- Size 687KB
- Sample240620-kagpgaxgjf
- SHA256 58edab62e6445b328ec5cacff8770cba35b734428c8cc032608c710d3427110b
- MD5 0453e377af0cc62edba4bbfc9b6a2d33
- SHA1 9a8ec7110cd4087247c776ee2015e66926710574
- SHA512 754a658e43303c9b815e326ed96160a81462959b6f6d1ba0bdf3be70a131810482e01db143759d66deeb1c94964d5e3021552bbfe4b086df852a5fd71bfd337d
- SSDEEP 12288:lslIdvbfEk2Q6ByxuzwtKOoWdgavlbbF1gii9SU9mOSgYL765Oj2K/QNwX:lsqbHTmRLOougqbFi2L76cjTIOX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0453e377af0cc62edba4bbfc9b6a2d33_JaffaCakes118.exe
Resource
win7-20240419-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
0453e377af0cc62edba4bbfc9b6a2d33_JaffaCakes118.exe
Resource
win10v2004-20240508-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 0453e377af0cc62edba4bbfc9b6a2d33_JaffaCakes118
- Size 687KB
- SHA256 58edab62e6445b328ec5cacff8770cba35b734428c8cc032608c710d3427110b
- MD5 0453e377af0cc62edba4bbfc9b6a2d33
- SHA1 9a8ec7110cd4087247c776ee2015e66926710574
- SHA512 754a658e43303c9b815e326ed96160a81462959b6f6d1ba0bdf3be70a131810482e01db143759d66deeb1c94964d5e3021552bbfe4b086df852a5fd71bfd337d
- SSDEEP 12288:lslIdvbfEk2Q6ByxuzwtKOoWdgavlbbF1gii9SU9mOSgYL765Oj2K/QNwX:lsqbHTmRLOougqbFi2L76cjTIOX
- MD5 SHA1 SHA512 SSDEEP
Score10/10ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
ModiLoader Second Stage
Drops file in System32 directory
Suspicious use of SetThreadContext