General
-
Target
24f96468385b949946a78648ddb63a7f_JaffaCakes118
-
Size
706KB
-
Sample
240704-het49ayfmn
-
MD5
24f96468385b949946a78648ddb63a7f
-
SHA1
a6fb9ed62c833f1d10c774cb4b84e5ff979ceef9
-
SHA256
d247022ec1f8c9cd42cd209fe3b482424219d3af065e1f6f382519739da8fad4
-
SHA512
6b3f685bfdea94bac5d26f52320a9e7d309e232ed0f457aaa0de8ec412d16877a6b3f43ef4933847cadc25539526ecf1eb8c7f510207857dcd30faf6af0abe68
-
SSDEEP
12288:/zX+AsteQ9H1i+CQ9ByRrfh0Lp9SPGFa8vimkVZr2yYT1v/X/FMBU/Zh2Kre+Wfm:/zX+AsteQ9H1i+CQ9ByRrfh0F9SPGFa+
Static task
static1
Behavioral task
behavioral1
Sample
24f96468385b949946a78648ddb63a7f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24f96468385b949946a78648ddb63a7f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
24f96468385b949946a78648ddb63a7f_JaffaCakes118
-
Size
706KB
-
MD5
24f96468385b949946a78648ddb63a7f
-
SHA1
a6fb9ed62c833f1d10c774cb4b84e5ff979ceef9
-
SHA256
d247022ec1f8c9cd42cd209fe3b482424219d3af065e1f6f382519739da8fad4
-
SHA512
6b3f685bfdea94bac5d26f52320a9e7d309e232ed0f457aaa0de8ec412d16877a6b3f43ef4933847cadc25539526ecf1eb8c7f510207857dcd30faf6af0abe68
-
SSDEEP
12288:/zX+AsteQ9H1i+CQ9ByRrfh0Lp9SPGFa8vimkVZr2yYT1v/X/FMBU/Zh2Kre+Wfm:/zX+AsteQ9H1i+CQ9ByRrfh0F9SPGFa+
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-