General
-
Target
a4718d36216d91a0701159e69393fb5d_JaffaCakes118
-
Size
650KB
-
Sample
241126-2dt8eazjeq
-
MD5
a4718d36216d91a0701159e69393fb5d
-
SHA1
5adce7ab01601a55faa563e8fca836ec124b0a4d
-
SHA256
11e44da370ed0b1a2425658aaf0341c8eb52d498eb8105d6a8d56ba09cbb5ddd
-
SHA512
8eeae6b30781357aa94e3c60e5b5517572d00a7d73211675ed6d63359860bfd49ffdd24469035e218ac9e47fbbeaf747188ee02506315a5a7cd980826ca99489
-
SSDEEP
12288:Q9oqvZkxQZa/KQb5nrpiOS8uk1F3Z4Exx+bIapgCq4oGdkeQZJui:Q9rRk/JfvQEX+bIH4NkeNi
Static task
static1
Behavioral task
behavioral1
Sample
a4718d36216d91a0701159e69393fb5d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a4718d36216d91a0701159e69393fb5d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
a4718d36216d91a0701159e69393fb5d_JaffaCakes118
-
Size
650KB
-
MD5
a4718d36216d91a0701159e69393fb5d
-
SHA1
5adce7ab01601a55faa563e8fca836ec124b0a4d
-
SHA256
11e44da370ed0b1a2425658aaf0341c8eb52d498eb8105d6a8d56ba09cbb5ddd
-
SHA512
8eeae6b30781357aa94e3c60e5b5517572d00a7d73211675ed6d63359860bfd49ffdd24469035e218ac9e47fbbeaf747188ee02506315a5a7cd980826ca99489
-
SSDEEP
12288:Q9oqvZkxQZa/KQb5nrpiOS8uk1F3Z4Exx+bIapgCq4oGdkeQZJui:Q9rRk/JfvQEX+bIH4NkeNi
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-