General
-
Target
d703334affd22c91b42cb82f4ec0aea1_JaffaCakes118
-
Size
528KB
-
Sample
240909-yvd1zaxdqk
-
MD5
d703334affd22c91b42cb82f4ec0aea1
-
SHA1
a198d5feaecbacc46f2444173cb7cd9e198e7d94
-
SHA256
8447060f4956925438543e6eed166f561fc1b135a4c8d3f90dff3e72c670f26a
-
SHA512
e5ac17dacd0d97cad5786becbec746b0e39aca3d34a1fa2f2a343eebf3d92c155955ac04dff360066a9d60412f677a27428a5ef2a64600037cdcc6d1f06803a3
-
SSDEEP
12288:J3MitKLewjuJUeCkrcUVznYvbU/EGM3WAeRHGeb/qT9AHT+:MSRJUeCkTVzYPW9Geb/quHy
Static task
static1
Behavioral task
behavioral1
Sample
d703334affd22c91b42cb82f4ec0aea1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d703334affd22c91b42cb82f4ec0aea1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d703334affd22c91b42cb82f4ec0aea1_JaffaCakes118
-
Size
528KB
-
MD5
d703334affd22c91b42cb82f4ec0aea1
-
SHA1
a198d5feaecbacc46f2444173cb7cd9e198e7d94
-
SHA256
8447060f4956925438543e6eed166f561fc1b135a4c8d3f90dff3e72c670f26a
-
SHA512
e5ac17dacd0d97cad5786becbec746b0e39aca3d34a1fa2f2a343eebf3d92c155955ac04dff360066a9d60412f677a27428a5ef2a64600037cdcc6d1f06803a3
-
SSDEEP
12288:J3MitKLewjuJUeCkrcUVznYvbU/EGM3WAeRHGeb/qT9AHT+:MSRJUeCkTVzYPW9Geb/quHy
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-