General
-
Target
cf21310dcd53322a2764113bfdf87cec_JaffaCakes118
-
Size
1.3MB
-
Sample
240906-kkjltaxarg
-
MD5
cf21310dcd53322a2764113bfdf87cec
-
SHA1
6b5f1acedafcfd482d1cc201ce75e19ec9bef846
-
SHA256
cc0db545afe7ccf5bc09de20e8283506888568372e92bd40f96ca344a0042764
-
SHA512
d552669fcd944111ad9a0d21a7241fa2ad837de7c39c8031a5b57c1691b737c92c9d22e936ab250ea14e7a857f1c8e3cebd7c6feb7cde9e2f9082f7ea6c0ad5c
-
SSDEEP
24576:JkRUWtVYzUdzylmKIidzk7vcPDPRpQZFm5wGZQDXQ+B4B9Pg7:JkRUWtVHd2ljTDPPICwzXeBRY
Static task
static1
Behavioral task
behavioral1
Sample
cf21310dcd53322a2764113bfdf87cec_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf21310dcd53322a2764113bfdf87cec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
cf21310dcd53322a2764113bfdf87cec_JaffaCakes118
-
Size
1.3MB
-
MD5
cf21310dcd53322a2764113bfdf87cec
-
SHA1
6b5f1acedafcfd482d1cc201ce75e19ec9bef846
-
SHA256
cc0db545afe7ccf5bc09de20e8283506888568372e92bd40f96ca344a0042764
-
SHA512
d552669fcd944111ad9a0d21a7241fa2ad837de7c39c8031a5b57c1691b737c92c9d22e936ab250ea14e7a857f1c8e3cebd7c6feb7cde9e2f9082f7ea6c0ad5c
-
SSDEEP
24576:JkRUWtVYzUdzylmKIidzk7vcPDPRpQZFm5wGZQDXQ+B4B9Pg7:JkRUWtVHd2ljTDPPICwzXeBRY
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-