General
-
Target
f75a95e4d273d4987b79ae919a4eac35_JaffaCakes118
-
Size
682KB
-
Sample
240926-cwa5tavenb
-
MD5
f75a95e4d273d4987b79ae919a4eac35
-
SHA1
07e833d1d904594df927bfba16d7adb7561e892f
-
SHA256
028cf6b9c581f34d1a2dd559c5d5ee2ca18f5c382d9e3cd95dcf77fd05a377b9
-
SHA512
1bb0a8e733953071220c688239736f816068bec48a96c31d1d11dc2d398a57d834345260265d447c518bf0656b28689208f010105903dc27b70c432717e751e8
-
SSDEEP
12288:2gdLmS1B2u2aNw9FQeQSzm6tbwqCsGdAdqwJ4g+KTGy:nhmSZ2aNw9FRy6VfUO+KTb
Behavioral task
behavioral1
Sample
f75a95e4d273d4987b79ae919a4eac35_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f75a95e4d273d4987b79ae919a4eac35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f75a95e4d273d4987b79ae919a4eac35_JaffaCakes118
-
Size
682KB
-
MD5
f75a95e4d273d4987b79ae919a4eac35
-
SHA1
07e833d1d904594df927bfba16d7adb7561e892f
-
SHA256
028cf6b9c581f34d1a2dd559c5d5ee2ca18f5c382d9e3cd95dcf77fd05a377b9
-
SHA512
1bb0a8e733953071220c688239736f816068bec48a96c31d1d11dc2d398a57d834345260265d447c518bf0656b28689208f010105903dc27b70c432717e751e8
-
SSDEEP
12288:2gdLmS1B2u2aNw9FQeQSzm6tbwqCsGdAdqwJ4g+KTGy:nhmSZ2aNw9FRy6VfUO+KTb
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-