General
-
Target
d80e4760fd0c4e4d59062e2237115540_JaffaCakes118
-
Size
456KB
-
Sample
241208-vcmcvazjcv
-
MD5
d80e4760fd0c4e4d59062e2237115540
-
SHA1
50f15f4e93821ae6f4593462a56a407e4ff56e0f
-
SHA256
b15073458e2e5e7ead20275dad66d2fa9d49b7c9ab6cce2807446ec2e96e38db
-
SHA512
a045fd549e328f1e316b8134d5fdcd7ee589826bbd2f2cb704d4869a8af7968da229614d1e1b8f3578f02590f050e9ca1814317ea8ff1c403620c3a3b138efb7
-
SSDEEP
12288:RxwnVSwVni7zIkIzV6aj84FQt0yNDisbYfx:0VjiPTIzV6KFQt0WDiQsx
Static task
static1
Behavioral task
behavioral1
Sample
d80e4760fd0c4e4d59062e2237115540_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d80e4760fd0c4e4d59062e2237115540_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
d80e4760fd0c4e4d59062e2237115540_JaffaCakes118
-
Size
456KB
-
MD5
d80e4760fd0c4e4d59062e2237115540
-
SHA1
50f15f4e93821ae6f4593462a56a407e4ff56e0f
-
SHA256
b15073458e2e5e7ead20275dad66d2fa9d49b7c9ab6cce2807446ec2e96e38db
-
SHA512
a045fd549e328f1e316b8134d5fdcd7ee589826bbd2f2cb704d4869a8af7968da229614d1e1b8f3578f02590f050e9ca1814317ea8ff1c403620c3a3b138efb7
-
SSDEEP
12288:RxwnVSwVni7zIkIzV6aj84FQt0yNDisbYfx:0VjiPTIzV6KFQt0WDiQsx
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-