General
-
Target
e153e62ee6b7ee403d8a614e85c31805_JaffaCakes118
-
Size
62KB
-
Sample
240915-amklsavgna
-
MD5
e153e62ee6b7ee403d8a614e85c31805
-
SHA1
fa8ffa3158bac7e4723160d99acc8d838e4061b5
-
SHA256
81b403beb50909855f79132952232544d9ba96ef181d504bba20f376974c07ce
-
SHA512
ffd75d3729eaf0c84611d9d9ccc8f718270c9f2a3ca4d3defc24fee2354a3510cfb3ae7e037218ffc296b5a9556cc090b58170deffaf9d61aad77515f6f5d25f
-
SSDEEP
768:1wwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pGUNJ8ZRjmhB7IRUIt5imVDsfKQ:Q4jqi5axwdrPpfNOpmhBEUIt5ifKxfO7
Behavioral task
behavioral1
Sample
e153e62ee6b7ee403d8a614e85c31805_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e153e62ee6b7ee403d8a614e85c31805_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e153e62ee6b7ee403d8a614e85c31805_JaffaCakes118
-
Size
62KB
-
MD5
e153e62ee6b7ee403d8a614e85c31805
-
SHA1
fa8ffa3158bac7e4723160d99acc8d838e4061b5
-
SHA256
81b403beb50909855f79132952232544d9ba96ef181d504bba20f376974c07ce
-
SHA512
ffd75d3729eaf0c84611d9d9ccc8f718270c9f2a3ca4d3defc24fee2354a3510cfb3ae7e037218ffc296b5a9556cc090b58170deffaf9d61aad77515f6f5d25f
-
SSDEEP
768:1wwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pGUNJ8ZRjmhB7IRUIt5imVDsfKQ:Q4jqi5axwdrPpfNOpmhBEUIt5ifKxfO7
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-