General
-
Target
fd084fea3ce1c64ea5791f3926b4164f_JaffaCakes118
-
Size
1.2MB
-
Sample
240928-ymwaaawgpc
-
MD5
fd084fea3ce1c64ea5791f3926b4164f
-
SHA1
36d0409a6536b3d81d4ddbca52799ebcca8dd7b7
-
SHA256
d5402f683e9bbba790a9f9fe5b21c99bb0c078a7f7dd8f6f12bf9bf392463de1
-
SHA512
01c13ecff8bff71f4ef867ad73b908ea70e4ac019c4672b592c66ebbcd58bc5d659ee614a2ee9f8ec1027187e015300303b0ea75e8fe97a4e19dcb4b7b83d74d
-
SSDEEP
24576:wuZA43AD8rwZlzmSP5f9gSQKojvDl7wOfB2XJseZ:wF4I8rwXxrpEvDlcOfMXie
Behavioral task
behavioral1
Sample
fd084fea3ce1c64ea5791f3926b4164f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd084fea3ce1c64ea5791f3926b4164f_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
fd084fea3ce1c64ea5791f3926b4164f_JaffaCakes118
-
Size
1.2MB
-
MD5
fd084fea3ce1c64ea5791f3926b4164f
-
SHA1
36d0409a6536b3d81d4ddbca52799ebcca8dd7b7
-
SHA256
d5402f683e9bbba790a9f9fe5b21c99bb0c078a7f7dd8f6f12bf9bf392463de1
-
SHA512
01c13ecff8bff71f4ef867ad73b908ea70e4ac019c4672b592c66ebbcd58bc5d659ee614a2ee9f8ec1027187e015300303b0ea75e8fe97a4e19dcb4b7b83d74d
-
SSDEEP
24576:wuZA43AD8rwZlzmSP5f9gSQKojvDl7wOfB2XJseZ:wF4I8rwXxrpEvDlcOfMXie
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-