General
-
Target
f768325a086941606cacad3b96c236a2_JaffaCakes118
-
Size
885KB
-
Sample
240926-dfrnaswgmg
-
MD5
f768325a086941606cacad3b96c236a2
-
SHA1
e20cd96eb43f7992887f02302818d7de07aa514c
-
SHA256
c9b208f99b7b7a2fd3b051a6fde1df4144201bbeb1110cd8f112160eff77b5e6
-
SHA512
50f488251f097f0aef44e89eefed07fc0c22922ca0391abbb29a6d05a01fb5d5bf968657497feb023c4ccbafb864fe105efc50269c58b29efe451a15fded752b
-
SSDEEP
24576:NEc//////2lo8s7z8U9FJfhtjFnwKUAhenQCbA7m9U1:ec//////2mn9FJfvjF7hek7sm
Static task
static1
Behavioral task
behavioral1
Sample
f768325a086941606cacad3b96c236a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f768325a086941606cacad3b96c236a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f768325a086941606cacad3b96c236a2_JaffaCakes118
-
Size
885KB
-
MD5
f768325a086941606cacad3b96c236a2
-
SHA1
e20cd96eb43f7992887f02302818d7de07aa514c
-
SHA256
c9b208f99b7b7a2fd3b051a6fde1df4144201bbeb1110cd8f112160eff77b5e6
-
SHA512
50f488251f097f0aef44e89eefed07fc0c22922ca0391abbb29a6d05a01fb5d5bf968657497feb023c4ccbafb864fe105efc50269c58b29efe451a15fded752b
-
SSDEEP
24576:NEc//////2lo8s7z8U9FJfhtjFnwKUAhenQCbA7m9U1:ec//////2mn9FJfvjF7hek7sm
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-