General
-
Target
0abc8bda844a0c700357a3cede06d5fb_JaffaCakes118
-
Size
1.2MB
-
Sample
240621-llfrzsvcna
-
MD5
0abc8bda844a0c700357a3cede06d5fb
-
SHA1
a632210667f170bac29a7d6288e0b907aeed9f64
-
SHA256
0c44b2c77e413e67f7f2a539bd7af3a1c5150e960a55e25c86f19971ff0f3fe9
-
SHA512
5f0efc8669d7f4c1039646672be7b9d3122b20a9147be91147e86c863550afff2d9ae9da8ff5a1a4e233c98e83b676593179ad82f9812c7c4946363cae1bc119
-
SSDEEP
24576:HER4MRBxd/3BMsUvKULn5hnvRKYTyVf3oMsA9eDUjoKz0nnWC:0Z5d/3BpUvlL7nvwYeV/oMbeDSoQGb
Behavioral task
behavioral1
Sample
0abc8bda844a0c700357a3cede06d5fb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0abc8bda844a0c700357a3cede06d5fb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0abc8bda844a0c700357a3cede06d5fb_JaffaCakes118
-
Size
1.2MB
-
MD5
0abc8bda844a0c700357a3cede06d5fb
-
SHA1
a632210667f170bac29a7d6288e0b907aeed9f64
-
SHA256
0c44b2c77e413e67f7f2a539bd7af3a1c5150e960a55e25c86f19971ff0f3fe9
-
SHA512
5f0efc8669d7f4c1039646672be7b9d3122b20a9147be91147e86c863550afff2d9ae9da8ff5a1a4e233c98e83b676593179ad82f9812c7c4946363cae1bc119
-
SSDEEP
24576:HER4MRBxd/3BMsUvKULn5hnvRKYTyVf3oMsA9eDUjoKz0nnWC:0Z5d/3BpUvlL7nvwYeV/oMbeDSoQGb
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-