General
-
Target
db6651fea88477bf4df63d2e63ad8cda_JaffaCakes118
-
Size
686KB
-
Sample
240911-29f1nayerd
-
MD5
db6651fea88477bf4df63d2e63ad8cda
-
SHA1
e3c2f610a9e283dd28bc08cc82e30c6798f8ef30
-
SHA256
c32c8b25fa70afefc564a6ac74dddf21a042bfebe08198c2d874d85f13a998de
-
SHA512
e86df194170c42be939397569f282864b3e3bb39db023a8af5ce16329b634313be3afe49a11e0c0beaa1cf18688d4b6532004f0c5122466630712d115f664efa
-
SSDEEP
12288:KZS7Bpm1OnB698Jzpz1iumeuYb+Pj08EdEcbIKCZ42UBJ13soMSGR0ldegBv:Kc8OnBpLi+xxEcMGGR6WgBv
Static task
static1
Behavioral task
behavioral1
Sample
db6651fea88477bf4df63d2e63ad8cda_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db6651fea88477bf4df63d2e63ad8cda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
db6651fea88477bf4df63d2e63ad8cda_JaffaCakes118
-
Size
686KB
-
MD5
db6651fea88477bf4df63d2e63ad8cda
-
SHA1
e3c2f610a9e283dd28bc08cc82e30c6798f8ef30
-
SHA256
c32c8b25fa70afefc564a6ac74dddf21a042bfebe08198c2d874d85f13a998de
-
SHA512
e86df194170c42be939397569f282864b3e3bb39db023a8af5ce16329b634313be3afe49a11e0c0beaa1cf18688d4b6532004f0c5122466630712d115f664efa
-
SSDEEP
12288:KZS7Bpm1OnB698Jzpz1iumeuYb+Pj08EdEcbIKCZ42UBJ13soMSGR0ldegBv:Kc8OnBpLi+xxEcMGGR6WgBv
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-