General
-
Target
74517c7bf0e77198050b6482df5dbd7c_JaffaCakes118
-
Size
78KB
-
Sample
240726-q31wps1frl
-
MD5
74517c7bf0e77198050b6482df5dbd7c
-
SHA1
6e1ec085a49a76bd0a47ad2a6d9c77c677ea701e
-
SHA256
e29e81dd210b82edb2609db772badeb300dd6eb9752f053d2e79bad7efe8d1ce
-
SHA512
4e809ec409ec1edfa3563537e038244407a3b77d0a6018a8770ac9d8dc57184d21c8ee5361d02857059ba6e5090119dd0ab2bffbc616fa3802d9aae5ede32f2c
-
SSDEEP
1536:GOqRQzEkkM1NOgopHDM+QlKWxsLNvWZlHiDoesP:GoDqg/3lKWxoQ7HiDob
Behavioral task
behavioral1
Sample
74517c7bf0e77198050b6482df5dbd7c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74517c7bf0e77198050b6482df5dbd7c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
74517c7bf0e77198050b6482df5dbd7c_JaffaCakes118
-
Size
78KB
-
MD5
74517c7bf0e77198050b6482df5dbd7c
-
SHA1
6e1ec085a49a76bd0a47ad2a6d9c77c677ea701e
-
SHA256
e29e81dd210b82edb2609db772badeb300dd6eb9752f053d2e79bad7efe8d1ce
-
SHA512
4e809ec409ec1edfa3563537e038244407a3b77d0a6018a8770ac9d8dc57184d21c8ee5361d02857059ba6e5090119dd0ab2bffbc616fa3802d9aae5ede32f2c
-
SSDEEP
1536:GOqRQzEkkM1NOgopHDM+QlKWxsLNvWZlHiDoesP:GoDqg/3lKWxoQ7HiDob
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-