General
-
Target
dd41975ba9ace29e07f9dda6ca6f4b46_JaffaCakes118
-
Size
570KB
-
Sample
240912-3q44tasfkb
-
MD5
dd41975ba9ace29e07f9dda6ca6f4b46
-
SHA1
fe10e0318b44b5cb490bacb78a8a2e36848ea919
-
SHA256
02bf5fb8e42fcdbc686a834eeab0346dd7929b7ff6c0c3df30cd841cb00f2d53
-
SHA512
dd8c08c4b95c9e037edcf5d89eb7210e4bcaad9254f1504dce49e6f70987b2d612ae5e53a363faa0999a5f6c3b468356c1496f3fe73ef77a3e36abc997945aff
-
SSDEEP
12288:UsHirJnVJJJJDydRC+FXd3pzzRIY2VgP2w3+8AuuDyHJ/Lq61G:TCpVJJJJDdCpzzRn2VgP285uDyHJzq6
Static task
static1
Behavioral task
behavioral1
Sample
dd41975ba9ace29e07f9dda6ca6f4b46_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd41975ba9ace29e07f9dda6ca6f4b46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
dd41975ba9ace29e07f9dda6ca6f4b46_JaffaCakes118
-
Size
570KB
-
MD5
dd41975ba9ace29e07f9dda6ca6f4b46
-
SHA1
fe10e0318b44b5cb490bacb78a8a2e36848ea919
-
SHA256
02bf5fb8e42fcdbc686a834eeab0346dd7929b7ff6c0c3df30cd841cb00f2d53
-
SHA512
dd8c08c4b95c9e037edcf5d89eb7210e4bcaad9254f1504dce49e6f70987b2d612ae5e53a363faa0999a5f6c3b468356c1496f3fe73ef77a3e36abc997945aff
-
SSDEEP
12288:UsHirJnVJJJJDydRC+FXd3pzzRIY2VgP2w3+8AuuDyHJ/Lq61G:TCpVJJJJDdCpzzRn2VgP285uDyHJzq6
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-