General
-
Target
d5acc0b45df267ab8d404a23478ed3db_JaffaCakes118
-
Size
453KB
-
Sample
240909-fesv3ssdnn
-
MD5
d5acc0b45df267ab8d404a23478ed3db
-
SHA1
0ef4019db6e518f4a8925a4ee197ce896b8b3458
-
SHA256
3b76652e69b2c472c8baae3c3d8a29ea59e55caa831eb692b30b03d1176b742f
-
SHA512
2b3bf90d9b4886e9983118320d4ae58e43805b74fecb185c477b1838ca4970233af0e384a182a875babf43816deb65a7cc3cb9208c34b8f0955ae91ddcf06345
-
SSDEEP
6144:CaxO5VmVf+WfGkTm3yRF1UsU/ZIGyTnO3s7DWRRaHBJgzEY0oNg8l:9O5VmVf+yDTZUVxIGYDU0hCY0
Behavioral task
behavioral1
Sample
d5acc0b45df267ab8d404a23478ed3db_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d5acc0b45df267ab8d404a23478ed3db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d5acc0b45df267ab8d404a23478ed3db_JaffaCakes118
-
Size
453KB
-
MD5
d5acc0b45df267ab8d404a23478ed3db
-
SHA1
0ef4019db6e518f4a8925a4ee197ce896b8b3458
-
SHA256
3b76652e69b2c472c8baae3c3d8a29ea59e55caa831eb692b30b03d1176b742f
-
SHA512
2b3bf90d9b4886e9983118320d4ae58e43805b74fecb185c477b1838ca4970233af0e384a182a875babf43816deb65a7cc3cb9208c34b8f0955ae91ddcf06345
-
SSDEEP
6144:CaxO5VmVf+WfGkTm3yRF1UsU/ZIGyTnO3s7DWRRaHBJgzEY0oNg8l:9O5VmVf+yDTZUVxIGYDU0hCY0
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-