General
-
Target
4b8069d1f59b720930f9d364dd561b88_JaffaCakes118
-
Size
91KB
-
Sample
240715-1fnmzazhjq
-
MD5
4b8069d1f59b720930f9d364dd561b88
-
SHA1
4743dc9afcf4d26d96aa8cf2eb9972983d0f428c
-
SHA256
708c2b9538dc15827c9d2cb1be766cccde18d1eb52b9cf2e9b7ffeb1280186e4
-
SHA512
f006cfca57cc461167dc55efe6bc4e391f4d62c84385bc0d5687c553f125789207cb85ec937b8ef3b592b1925888b687a8b5d4f04df0bd232a49815805cb4060
-
SSDEEP
1536:84hAJtLwSZdx+0EWv99T+8OrhKlV8Rl8hsxWSO0Jj5:8Nt0oA0EWv99rOFoGRl8hg5
Behavioral task
behavioral1
Sample
4b8069d1f59b720930f9d364dd561b88_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b8069d1f59b720930f9d364dd561b88_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
4b8069d1f59b720930f9d364dd561b88_JaffaCakes118
-
Size
91KB
-
MD5
4b8069d1f59b720930f9d364dd561b88
-
SHA1
4743dc9afcf4d26d96aa8cf2eb9972983d0f428c
-
SHA256
708c2b9538dc15827c9d2cb1be766cccde18d1eb52b9cf2e9b7ffeb1280186e4
-
SHA512
f006cfca57cc461167dc55efe6bc4e391f4d62c84385bc0d5687c553f125789207cb85ec937b8ef3b592b1925888b687a8b5d4f04df0bd232a49815805cb4060
-
SSDEEP
1536:84hAJtLwSZdx+0EWv99T+8OrhKlV8Rl8hsxWSO0Jj5:8Nt0oA0EWv99rOFoGRl8hg5
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-