General
-
Target
ec091e865d60694b260455ec1edac80b_JaffaCakes118
-
Size
36KB
-
Sample
240919-x5ngqawdke
-
MD5
ec091e865d60694b260455ec1edac80b
-
SHA1
b45803a6b63a0749913ddb9c88331aaeab9f251a
-
SHA256
644bc927f7dc7ec791e9f2a8f2b4f664f6ff210c87d8a7f9262da59125350332
-
SHA512
fa88cb26dc300a5a0249b384148cba156522073954d9fc9ee064afc1f6cd4f1778cba2b1c39204b60cebb84552ca06071736066fade147c1b35539289fad49cc
-
SSDEEP
768:SJT4n0+DN8zjxig+6xt+SOduIdaXKxLmGQj1DIjcA:qUn13H8zTj1DXA
Static task
static1
Behavioral task
behavioral1
Sample
ec091e865d60694b260455ec1edac80b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec091e865d60694b260455ec1edac80b_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
ec091e865d60694b260455ec1edac80b_JaffaCakes118
-
Size
36KB
-
MD5
ec091e865d60694b260455ec1edac80b
-
SHA1
b45803a6b63a0749913ddb9c88331aaeab9f251a
-
SHA256
644bc927f7dc7ec791e9f2a8f2b4f664f6ff210c87d8a7f9262da59125350332
-
SHA512
fa88cb26dc300a5a0249b384148cba156522073954d9fc9ee064afc1f6cd4f1778cba2b1c39204b60cebb84552ca06071736066fade147c1b35539289fad49cc
-
SSDEEP
768:SJT4n0+DN8zjxig+6xt+SOduIdaXKxLmGQj1DIjcA:qUn13H8zTj1DXA
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-