General
-
Target
9e38d22788d64564b68ae76430ab890d_JaffaCakes118
-
Size
49KB
-
Sample
241125-188hvayrfx
-
MD5
9e38d22788d64564b68ae76430ab890d
-
SHA1
3a8b0ebf46769a59fc5c213bda14b4a262fe0820
-
SHA256
bff9af2807acf7ddfadb1b521ae8ff3dcab1e23db041dd8e923680531403aef1
-
SHA512
71ce433d44627dc8d45aa24afba04a797dfad4b69ee890119f1c789aaace438fe178c872263918a8300ea4bc197c1411ed72ddd9e0acfbf4872c1b2f04770176
-
SSDEEP
768:TRVNq/9pkEAj2KMWj6kOzeQ5wdSqkLS/Kk6zfwc2feWr/5S3PTX9boSP:TLNq/8ECJj6kZSAHcL3rXh
Behavioral task
behavioral1
Sample
9e38d22788d64564b68ae76430ab890d_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
9e38d22788d64564b68ae76430ab890d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
9e38d22788d64564b68ae76430ab890d_JaffaCakes118
-
Size
49KB
-
MD5
9e38d22788d64564b68ae76430ab890d
-
SHA1
3a8b0ebf46769a59fc5c213bda14b4a262fe0820
-
SHA256
bff9af2807acf7ddfadb1b521ae8ff3dcab1e23db041dd8e923680531403aef1
-
SHA512
71ce433d44627dc8d45aa24afba04a797dfad4b69ee890119f1c789aaace438fe178c872263918a8300ea4bc197c1411ed72ddd9e0acfbf4872c1b2f04770176
-
SSDEEP
768:TRVNq/9pkEAj2KMWj6kOzeQ5wdSqkLS/Kk6zfwc2feWr/5S3PTX9boSP:TLNq/8ECJj6kZSAHcL3rXh
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-