General
-
Target
e29756d9c24b3ad80aade5a3ead9c41b_JaffaCakes118
-
Size
795KB
-
Sample
240915-qrpz3avhjd
-
MD5
e29756d9c24b3ad80aade5a3ead9c41b
-
SHA1
4aaf832ac117841bb3c4edf5f0ecf67ec4a31569
-
SHA256
0e251a0cafd79924069e3132cd2f8983effe07c8360dd489fbde927d2c9775fc
-
SHA512
1d48e48ab756e73474d158b2661f1860ab45a4d0b7031c027f4d2c407c4b6b901776459e44e4a2156e10e1a69259984f00863b2a5978a31ad2ac593f24f9da3f
-
SSDEEP
24576:8gsmSe5ReF4S2rIbSU1sZk5K239pZ9dOwkq4W6S:8+SxF4ElI2tpkwQW1
Static task
static1
Behavioral task
behavioral1
Sample
e29756d9c24b3ad80aade5a3ead9c41b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e29756d9c24b3ad80aade5a3ead9c41b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e29756d9c24b3ad80aade5a3ead9c41b_JaffaCakes118
-
Size
795KB
-
MD5
e29756d9c24b3ad80aade5a3ead9c41b
-
SHA1
4aaf832ac117841bb3c4edf5f0ecf67ec4a31569
-
SHA256
0e251a0cafd79924069e3132cd2f8983effe07c8360dd489fbde927d2c9775fc
-
SHA512
1d48e48ab756e73474d158b2661f1860ab45a4d0b7031c027f4d2c407c4b6b901776459e44e4a2156e10e1a69259984f00863b2a5978a31ad2ac593f24f9da3f
-
SSDEEP
24576:8gsmSe5ReF4S2rIbSU1sZk5K239pZ9dOwkq4W6S:8+SxF4ElI2tpkwQW1
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-