General
-
Target
37515907b724d032b10756abf9940d32_JaffaCakes118
-
Size
749KB
-
Sample
240711-cm5ytstblk
-
MD5
37515907b724d032b10756abf9940d32
-
SHA1
f33ae60cb4fc4810ac5cce59557c499ef7314c32
-
SHA256
87856fe380b86cda39a679f8fd8d2f4cd1c2c6e6ee42578b8251ca58b1f8c453
-
SHA512
795dc322b0e4463200cf5f6d5813b2d4f8b7c76c4dba96711cd127978865b0ef641b2df7ecc368c8f76ecaa9db9b6a8c407961d2306ba40737074ea1593640ab
-
SSDEEP
12288:F2tFee1ByLfMLwAElG6GFDMvcnoy0TSOkB0+uHqATA+EKSK:ojdSfMLQlsACoyW16uKATVEK9
Behavioral task
behavioral1
Sample
37515907b724d032b10756abf9940d32_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37515907b724d032b10756abf9940d32_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
37515907b724d032b10756abf9940d32_JaffaCakes118
-
Size
749KB
-
MD5
37515907b724d032b10756abf9940d32
-
SHA1
f33ae60cb4fc4810ac5cce59557c499ef7314c32
-
SHA256
87856fe380b86cda39a679f8fd8d2f4cd1c2c6e6ee42578b8251ca58b1f8c453
-
SHA512
795dc322b0e4463200cf5f6d5813b2d4f8b7c76c4dba96711cd127978865b0ef641b2df7ecc368c8f76ecaa9db9b6a8c407961d2306ba40737074ea1593640ab
-
SSDEEP
12288:F2tFee1ByLfMLwAElG6GFDMvcnoy0TSOkB0+uHqATA+EKSK:ojdSfMLQlsACoyW16uKATVEK9
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-