General
-
Target
ddf260ebb756d78613c86e2223f2d88b_JaffaCakes118
-
Size
72KB
-
Sample
240913-h7ym5s1gpc
-
MD5
ddf260ebb756d78613c86e2223f2d88b
-
SHA1
53798e47dd30adc3af841e6da81eb5d8e840fd57
-
SHA256
237ff7bb262da84c0bc0e6660bcd9d8ec62c36cd870ed5267b04f5ba79ff0b34
-
SHA512
64a0387ba90156cb383792d806d3f55b78b0d3c462ae6d4310e6a15b041cd8cfc4725fe93cec17394853da0c369bf1dde3d298bb5d13e5fab81019f23dee8093
-
SSDEEP
1536:4gmaLKsqFVN79otJ9V28JSbzQB07I9UiN6gEIQ/VN4:VIVN7OJ9LiYzEL
Static task
static1
Behavioral task
behavioral1
Sample
ddf260ebb756d78613c86e2223f2d88b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddf260ebb756d78613c86e2223f2d88b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ddf260ebb756d78613c86e2223f2d88b_JaffaCakes118
-
Size
72KB
-
MD5
ddf260ebb756d78613c86e2223f2d88b
-
SHA1
53798e47dd30adc3af841e6da81eb5d8e840fd57
-
SHA256
237ff7bb262da84c0bc0e6660bcd9d8ec62c36cd870ed5267b04f5ba79ff0b34
-
SHA512
64a0387ba90156cb383792d806d3f55b78b0d3c462ae6d4310e6a15b041cd8cfc4725fe93cec17394853da0c369bf1dde3d298bb5d13e5fab81019f23dee8093
-
SSDEEP
1536:4gmaLKsqFVN79otJ9V28JSbzQB07I9UiN6gEIQ/VN4:VIVN7OJ9LiYzEL
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-