General
- Target 0b7a9fa31fb747d578ca166f180f6a5e_JaffaCakes118
- Size 284KB
- Sample240621-pp9e9atdnk
- SHA256 32b768551bbd6b517747d2c6adebbeb731596d14f13dfb8c316c6ff7e5f0272b
- MD5 0b7a9fa31fb747d578ca166f180f6a5e
- SHA1 ae491e43295eea65fbffa0f4fd209ebff02fd5f7
- SHA512 9d098e68dff33166f720db8615fd3bbf722ed915824a92007a2d40b37e66d89d9634a8ffa639f33ed632882dbc01e2287036c2e3d2e22177775300227dc01304
- SSDEEP 6144:t0iLvKic8x8Q6/AXcZztfF3pYOtfCeG7a91b5J:KEvKi3HMDY+G7+1bT
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0b7a9fa31fb747d578ca166f180f6a5e_JaffaCakes118.exe
Resource
win7-20240611-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
0b7a9fa31fb747d578ca166f180f6a5e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 0b7a9fa31fb747d578ca166f180f6a5e_JaffaCakes118
- Size 284KB
- SHA256 32b768551bbd6b517747d2c6adebbeb731596d14f13dfb8c316c6ff7e5f0272b
- MD5 0b7a9fa31fb747d578ca166f180f6a5e
- SHA1 ae491e43295eea65fbffa0f4fd209ebff02fd5f7
- SHA512 9d098e68dff33166f720db8615fd3bbf722ed915824a92007a2d40b37e66d89d9634a8ffa639f33ed632882dbc01e2287036c2e3d2e22177775300227dc01304
- SSDEEP 6144:t0iLvKic8x8Q6/AXcZztfF3pYOtfCeG7a91b5J:KEvKi3HMDY+G7+1bT
- MD5 SHA1 SHA512 SSDEEP
Score10/10ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
ModiLoader Second Stage
Suspicious use of SetThreadContext