General
-
Target
923a51fdf9897f3e8ed6c01f89d71d23_JaffaCakes118
-
Size
408KB
-
Sample
241124-dp3f6a1mhs
-
MD5
923a51fdf9897f3e8ed6c01f89d71d23
-
SHA1
dc3d586ac703b7d606bfddb7cb68996e40c1076c
-
SHA256
7c5dd0542372b835c219118b499bf6632f3ddb0f11c24e453c76c96046518a6c
-
SHA512
299a5355b66aeb503daba3399ba7b98a11b71fcce7de9c45bd8a95d4f32bdd66c2421a4c6bf817e2f2bc863c3a28f9f7e44bad9591661bbb8d8f30fcae85f652
-
SSDEEP
12288:mrj57jHMXPoIsBrDHVeuLVv+MsxvyhVPE:mrj5XHlpBleEvh5
Static task
static1
Behavioral task
behavioral1
Sample
923a51fdf9897f3e8ed6c01f89d71d23_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
923a51fdf9897f3e8ed6c01f89d71d23_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
923a51fdf9897f3e8ed6c01f89d71d23_JaffaCakes118
-
Size
408KB
-
MD5
923a51fdf9897f3e8ed6c01f89d71d23
-
SHA1
dc3d586ac703b7d606bfddb7cb68996e40c1076c
-
SHA256
7c5dd0542372b835c219118b499bf6632f3ddb0f11c24e453c76c96046518a6c
-
SHA512
299a5355b66aeb503daba3399ba7b98a11b71fcce7de9c45bd8a95d4f32bdd66c2421a4c6bf817e2f2bc863c3a28f9f7e44bad9591661bbb8d8f30fcae85f652
-
SSDEEP
12288:mrj57jHMXPoIsBrDHVeuLVv+MsxvyhVPE:mrj5XHlpBleEvh5
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-