General
-
Target
d14133b31c1ee1bc07803f94c6383f5d_JaffaCakes118
-
Size
90KB
-
Sample
240907-gygslayfne
-
MD5
d14133b31c1ee1bc07803f94c6383f5d
-
SHA1
4eeb6c4e7a56dca1e34fdb4d2dff9c5c487afc46
-
SHA256
37e60c70c4e68ebcf2c2160a2161de33a408379cb1ed90403fcbfe5fd2769cb0
-
SHA512
1b1a2d0003430328a59b023adb9527ffaa443365a4b7266ce94381bc867bb5f1ca2feaeff5b1348fffccb01da7dc03a2cd6ace47d95192b2071329b115637906
-
SSDEEP
1536:DLNq/8ECJj6kZSAHcL3aXVEVqY5diGhXECZpfsm0kZEPabOR/YrH5:DPdZSAMaXGVqcdXukZ/b6grZ
Behavioral task
behavioral1
Sample
d14133b31c1ee1bc07803f94c6383f5d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d14133b31c1ee1bc07803f94c6383f5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d14133b31c1ee1bc07803f94c6383f5d_JaffaCakes118
-
Size
90KB
-
MD5
d14133b31c1ee1bc07803f94c6383f5d
-
SHA1
4eeb6c4e7a56dca1e34fdb4d2dff9c5c487afc46
-
SHA256
37e60c70c4e68ebcf2c2160a2161de33a408379cb1ed90403fcbfe5fd2769cb0
-
SHA512
1b1a2d0003430328a59b023adb9527ffaa443365a4b7266ce94381bc867bb5f1ca2feaeff5b1348fffccb01da7dc03a2cd6ace47d95192b2071329b115637906
-
SSDEEP
1536:DLNq/8ECJj6kZSAHcL3aXVEVqY5diGhXECZpfsm0kZEPabOR/YrH5:DPdZSAMaXGVqcdXukZ/b6grZ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-