General
- Target 1fc70ef6237fa6f76ac89cc7dcfe5fbc_JaffaCakes118
- Size 710KB
- Sample240702-sl4blsybkd
- SHA256 58240d4e4c5ee2a21f370654a8b64bdaa1b682d4904b7746ce4132e3ae688fe2
- MD5 1fc70ef6237fa6f76ac89cc7dcfe5fbc
- SHA1 95d003d280d1a3c8ed9f7f9eecd9a806dd9fb1d6
- SHA512 41d15694012465f331f54fe130a0a2645689f54648bdb2bf9744004ba513a0fc851c21a4b568f04c87e3dae1f86dcbf4b72bae8f1b5ee1e1ab32174b35afaaea
- SSDEEP 12288:ytS5RTQ7aT7YilhjzAF4gv6toSAUQJ0xkaa+MkAAT+pK:6c22T7BRS46zSAUrWLNATZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
1fc70ef6237fa6f76ac89cc7dcfe5fbc_JaffaCakes118.exe
Resource
win7-20240419-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
1fc70ef6237fa6f76ac89cc7dcfe5fbc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 1fc70ef6237fa6f76ac89cc7dcfe5fbc_JaffaCakes118
- Size 710KB
- SHA256 58240d4e4c5ee2a21f370654a8b64bdaa1b682d4904b7746ce4132e3ae688fe2
- MD5 1fc70ef6237fa6f76ac89cc7dcfe5fbc
- SHA1 95d003d280d1a3c8ed9f7f9eecd9a806dd9fb1d6
- SHA512 41d15694012465f331f54fe130a0a2645689f54648bdb2bf9744004ba513a0fc851c21a4b568f04c87e3dae1f86dcbf4b72bae8f1b5ee1e1ab32174b35afaaea
- SSDEEP 12288:ytS5RTQ7aT7YilhjzAF4gv6toSAUQJ0xkaa+MkAAT+pK:6c22T7BRS46zSAUrWLNATZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext