General
-
Target
c4ef71e8de522260bfe8f594d9e2b0bd_JaffaCakes118
-
Size
41KB
-
Sample
241204-311t5stmfn
-
MD5
c4ef71e8de522260bfe8f594d9e2b0bd
-
SHA1
eea4c9f0998641854ac27681944ec4e178531d43
-
SHA256
02cd0c93f2b6652fa005d47cc8c94e8d3f08cd1265f6f78ef1d4c5deaf12968a
-
SHA512
f90373c466851f76e7326352f5c8e449630a2a96381c06611ebb4208842e8c7260d1db39b0856c704cb3f7eef4f86d0e128cb25625c179b3c579d6831e68df62
-
SSDEEP
384:S9mRSCF82EkoaoP6ZbHlgbQSbof/S9daJxqpqyLohNX9iDdc0Eekq:S4RzS2r5oPglHSuJKqyLohaGX0
Behavioral task
behavioral1
Sample
c4ef71e8de522260bfe8f594d9e2b0bd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c4ef71e8de522260bfe8f594d9e2b0bd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
c4ef71e8de522260bfe8f594d9e2b0bd_JaffaCakes118
-
Size
41KB
-
MD5
c4ef71e8de522260bfe8f594d9e2b0bd
-
SHA1
eea4c9f0998641854ac27681944ec4e178531d43
-
SHA256
02cd0c93f2b6652fa005d47cc8c94e8d3f08cd1265f6f78ef1d4c5deaf12968a
-
SHA512
f90373c466851f76e7326352f5c8e449630a2a96381c06611ebb4208842e8c7260d1db39b0856c704cb3f7eef4f86d0e128cb25625c179b3c579d6831e68df62
-
SSDEEP
384:S9mRSCF82EkoaoP6ZbHlgbQSbof/S9daJxqpqyLohNX9iDdc0Eekq:S4RzS2r5oPglHSuJKqyLohaGX0
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-