General
-
Target
e5b853863432a5e68e23ecb7ca79aa1b_JaffaCakes118
-
Size
744KB
-
Sample
240916-2xnjzathpr
-
MD5
e5b853863432a5e68e23ecb7ca79aa1b
-
SHA1
8cb2c0014e73c89e7623f16a919c8c28fb2a77d8
-
SHA256
2d64ad27cc1d36e12b079ac5d7b399f284039343e4e9ff2ee74ebe321603863b
-
SHA512
f3ecd884809a0e2555483850f61e71d276e8912bea686ce7d53764ada75137ee54a2015fb0022bb1bde6eec31def68962c3c652a4b25ee03bc4ec8edd7d1b673
-
SSDEEP
12288:YJc//////VFmKQhBGKbQlApXwh4JiRdF00dn8sOLljTnQvybFqI6IlhXwWSQ:6c//////Z+7lZ1Cd20/OLlQabFEILwWz
Static task
static1
Behavioral task
behavioral1
Sample
e5b853863432a5e68e23ecb7ca79aa1b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e5b853863432a5e68e23ecb7ca79aa1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e5b853863432a5e68e23ecb7ca79aa1b_JaffaCakes118
-
Size
744KB
-
MD5
e5b853863432a5e68e23ecb7ca79aa1b
-
SHA1
8cb2c0014e73c89e7623f16a919c8c28fb2a77d8
-
SHA256
2d64ad27cc1d36e12b079ac5d7b399f284039343e4e9ff2ee74ebe321603863b
-
SHA512
f3ecd884809a0e2555483850f61e71d276e8912bea686ce7d53764ada75137ee54a2015fb0022bb1bde6eec31def68962c3c652a4b25ee03bc4ec8edd7d1b673
-
SSDEEP
12288:YJc//////VFmKQhBGKbQlApXwh4JiRdF00dn8sOLljTnQvybFqI6IlhXwWSQ:6c//////Z+7lZ1Cd20/OLlQabFEILwWz
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-