General
-
Target
b14c410d0c62d099921fa070ba05221e_JaffaCakes118
-
Size
12KB
-
Sample
241129-pvq6vszraj
-
MD5
b14c410d0c62d099921fa070ba05221e
-
SHA1
3327d02f995a00d1dac9b9192df1fdf1e2a7f156
-
SHA256
a714b4778b9a3412e751caccd2ae02c93bf0f467ca0ed7ca2d1080cf87d608ee
-
SHA512
e3d3c3bb0cf118c364f5bcafca2e9423d5ba63b9826b45958a9f9dcf58b0402a0d90f34613c009d0e78d3ed7d998a1ec4890fdb3f743dd1f1eef3ebf465253e9
-
SSDEEP
192:nP2/9vuLURfOX3SCF82tV6ey2SnkoaoIS6Aa4E:k9mRSCF82EkoaoP6Ak
Behavioral task
behavioral1
Sample
b14c410d0c62d099921fa070ba05221e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b14c410d0c62d099921fa070ba05221e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
b14c410d0c62d099921fa070ba05221e_JaffaCakes118
-
Size
12KB
-
MD5
b14c410d0c62d099921fa070ba05221e
-
SHA1
3327d02f995a00d1dac9b9192df1fdf1e2a7f156
-
SHA256
a714b4778b9a3412e751caccd2ae02c93bf0f467ca0ed7ca2d1080cf87d608ee
-
SHA512
e3d3c3bb0cf118c364f5bcafca2e9423d5ba63b9826b45958a9f9dcf58b0402a0d90f34613c009d0e78d3ed7d998a1ec4890fdb3f743dd1f1eef3ebf465253e9
-
SSDEEP
192:nP2/9vuLURfOX3SCF82tV6ey2SnkoaoIS6Aa4E:k9mRSCF82EkoaoP6Ak
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-