General
-
Target
e10780895bb0b22683d910f09c8f6d78_JaffaCakes118
-
Size
62KB
-
Sample
240914-zvmhsawcpl
-
MD5
e10780895bb0b22683d910f09c8f6d78
-
SHA1
1d134adb333ff0067f38d4e6edfdc72ef25a07d0
-
SHA256
bf5137ce5ca043dc9f397a676873b984e1fe3cee7c39acf9b4a50ee301765f7f
-
SHA512
16d865a1dea4765f427a0ca782301e3be306b64aaf4afc847a91a48c76439ae58f58a21b503b609ce41e39ba9058ff811fd903a3114b69608a099caa826fb14b
-
SSDEEP
768:swwyxQouEWjSHD23fbU50aaaxwdYzsRgw8rt9pGUNJ8ZRjmhB7IRUIt5imVDsfK5:Z4jqi5axwdaPpfNOpmhBEUIt5ifKxfOq
Behavioral task
behavioral1
Sample
e10780895bb0b22683d910f09c8f6d78_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e10780895bb0b22683d910f09c8f6d78_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e10780895bb0b22683d910f09c8f6d78_JaffaCakes118
-
Size
62KB
-
MD5
e10780895bb0b22683d910f09c8f6d78
-
SHA1
1d134adb333ff0067f38d4e6edfdc72ef25a07d0
-
SHA256
bf5137ce5ca043dc9f397a676873b984e1fe3cee7c39acf9b4a50ee301765f7f
-
SHA512
16d865a1dea4765f427a0ca782301e3be306b64aaf4afc847a91a48c76439ae58f58a21b503b609ce41e39ba9058ff811fd903a3114b69608a099caa826fb14b
-
SSDEEP
768:swwyxQouEWjSHD23fbU50aaaxwdYzsRgw8rt9pGUNJ8ZRjmhB7IRUIt5imVDsfK5:Z4jqi5axwdaPpfNOpmhBEUIt5ifKxfOq
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-