General
-
Target
8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118
-
Size
721KB
-
Sample
241102-2f9e4sxdpa
-
MD5
8829b5c60f539fa0aa9c671cbb40dadb
-
SHA1
eebd0c174c4aa318637c8a97b5b2ac7be686a954
-
SHA256
c00df964658bcaa5b56857cf74adfe899a0347979a38b7d0fad46bacd13d06fc
-
SHA512
f6555e96f766d46e624223d12026ca9d33265b2e1b8f278110ea390717f208a46cec33fe21c52fb5156049c398a064e9dcc9ee521e776af1639fb6f9a58c391d
-
SSDEEP
12288:Fc//////rMz86mM/itg5lIQkkjXTz74FeCHVv53lppo:Fc//////rW86stQ9TTf4sW953Xpo
Static task
static1
Behavioral task
behavioral1
Sample
8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118
-
Size
721KB
-
MD5
8829b5c60f539fa0aa9c671cbb40dadb
-
SHA1
eebd0c174c4aa318637c8a97b5b2ac7be686a954
-
SHA256
c00df964658bcaa5b56857cf74adfe899a0347979a38b7d0fad46bacd13d06fc
-
SHA512
f6555e96f766d46e624223d12026ca9d33265b2e1b8f278110ea390717f208a46cec33fe21c52fb5156049c398a064e9dcc9ee521e776af1639fb6f9a58c391d
-
SSDEEP
12288:Fc//////rMz86mM/itg5lIQkkjXTz74FeCHVv53lppo:Fc//////rW86stQ9TTf4sW953Xpo
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-