General
-
Target
96a35777256b0ca9dffe94aa45b1f99a_JaffaCakes118
-
Size
293KB
-
Sample
240814-sraaqazane
-
MD5
96a35777256b0ca9dffe94aa45b1f99a
-
SHA1
cdc9c276979612b03ee92d48a63892ae0209e6c4
-
SHA256
e9efdeb32f97783abfe6250b785d43fd1a38329d34d3bc13656cb37625820e63
-
SHA512
54cd8262864a92f7384d0f8c55e7b2d0c4a1ef45855d47cb2089a2590df839bdb4643e772053acd99fc3f22d2f0b1054803dacd0ec9145ea0708a7e960322d31
-
SSDEEP
6144:zq3qfVvOdaEAvID4sicwdRCms1h3Axyw4f1f:cqfxrIBivR01htfF
Static task
static1
Behavioral task
behavioral1
Sample
96a35777256b0ca9dffe94aa45b1f99a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96a35777256b0ca9dffe94aa45b1f99a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
96a35777256b0ca9dffe94aa45b1f99a_JaffaCakes118
-
Size
293KB
-
MD5
96a35777256b0ca9dffe94aa45b1f99a
-
SHA1
cdc9c276979612b03ee92d48a63892ae0209e6c4
-
SHA256
e9efdeb32f97783abfe6250b785d43fd1a38329d34d3bc13656cb37625820e63
-
SHA512
54cd8262864a92f7384d0f8c55e7b2d0c4a1ef45855d47cb2089a2590df839bdb4643e772053acd99fc3f22d2f0b1054803dacd0ec9145ea0708a7e960322d31
-
SSDEEP
6144:zq3qfVvOdaEAvID4sicwdRCms1h3Axyw4f1f:cqfxrIBivR01htfF
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-