General
-
Target
f91bb21da3ff22465b5dbd35dbc15cac_JaffaCakes118
-
Size
2.3MB
-
Sample
240926-ymw7ksvfnp
-
MD5
f91bb21da3ff22465b5dbd35dbc15cac
-
SHA1
eb329e451d34f9b5f3b80be20e395d1073d5db61
-
SHA256
8ab9835526824935ac689c807bc8a274e963d11bc8ec0fd0837b34a43f47d7e8
-
SHA512
efeadac100d793b5a547f3ddfbc0b7375422ed2bd94e962710fbed8393d5830f08c45b22d0405a93a32ed187f24d46e0a76b519d29bd69a9a959bba8a8761c35
-
SSDEEP
49152:D0foBvPfSOMW/bNmna5TxkTiBpCKaYj65aBOJ7DyVbykGex:ZvZ/bNmqXBdaYvOpy5ykGK
Static task
static1
Behavioral task
behavioral1
Sample
f91bb21da3ff22465b5dbd35dbc15cac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f91bb21da3ff22465b5dbd35dbc15cac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f91bb21da3ff22465b5dbd35dbc15cac_JaffaCakes118
-
Size
2.3MB
-
MD5
f91bb21da3ff22465b5dbd35dbc15cac
-
SHA1
eb329e451d34f9b5f3b80be20e395d1073d5db61
-
SHA256
8ab9835526824935ac689c807bc8a274e963d11bc8ec0fd0837b34a43f47d7e8
-
SHA512
efeadac100d793b5a547f3ddfbc0b7375422ed2bd94e962710fbed8393d5830f08c45b22d0405a93a32ed187f24d46e0a76b519d29bd69a9a959bba8a8761c35
-
SSDEEP
49152:D0foBvPfSOMW/bNmna5TxkTiBpCKaYj65aBOJ7DyVbykGex:ZvZ/bNmqXBdaYvOpy5ykGK
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-