General
-
Target
d2d10814ee6b0a5bf36acc9240ddf56f_JaffaCakes118
-
Size
218KB
-
Sample
240907-zpd98avapp
-
MD5
d2d10814ee6b0a5bf36acc9240ddf56f
-
SHA1
afe9f9bcde7b18b7e710c40ac1349ba111251f0c
-
SHA256
ed6816e15e784c7888c0a3c813312dd561d397066fa6eeb37dcaa27cb6c85666
-
SHA512
f064c68892e48953d28c7fa3bb486938b02e522bce45fb65364087e1fd26372e1c8159db4450bd7bb5ea902e120eedf83c0a0dbdd9197b96767faeae5b88e1ff
-
SSDEEP
6144:evSKyJn0qHc4GEx3msaJ4AddMWYcGAU1bL3mbbkjG:vJn0qHc4d2sLdbcXmHKk
Static task
static1
Behavioral task
behavioral1
Sample
d2d10814ee6b0a5bf36acc9240ddf56f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2d10814ee6b0a5bf36acc9240ddf56f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d2d10814ee6b0a5bf36acc9240ddf56f_JaffaCakes118
-
Size
218KB
-
MD5
d2d10814ee6b0a5bf36acc9240ddf56f
-
SHA1
afe9f9bcde7b18b7e710c40ac1349ba111251f0c
-
SHA256
ed6816e15e784c7888c0a3c813312dd561d397066fa6eeb37dcaa27cb6c85666
-
SHA512
f064c68892e48953d28c7fa3bb486938b02e522bce45fb65364087e1fd26372e1c8159db4450bd7bb5ea902e120eedf83c0a0dbdd9197b96767faeae5b88e1ff
-
SSDEEP
6144:evSKyJn0qHc4GEx3msaJ4AddMWYcGAU1bL3mbbkjG:vJn0qHc4d2sLdbcXmHKk
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-