General
-
Target
e102bea25badab3d5a50bd9c149f9b2c_JaffaCakes118
-
Size
743KB
-
Sample
241211-mdz2bsyldv
-
MD5
e102bea25badab3d5a50bd9c149f9b2c
-
SHA1
94cd6ded9f448da345e19c7a9da573bc5e1948b4
-
SHA256
c5690ad3a8162f76b660bcfaa6e6d12914bb56cdd49f552487bcffadfb52ef20
-
SHA512
b9c24e5a8905e4519568f705e364a903c5cd21cc8bde782686bbf82fcf6aedfb4c140a057e8f007261473903d046fade984da596dd2d79b9996a5cf9d3625b49
-
SSDEEP
12288:zwb9Bi/ggFrH1mYfBJGkP+Su4lGhOagZGRnoDutcq1:zMi4I7oYfBglTjhOhARnrtcS
Static task
static1
Behavioral task
behavioral1
Sample
e102bea25badab3d5a50bd9c149f9b2c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e102bea25badab3d5a50bd9c149f9b2c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
e102bea25badab3d5a50bd9c149f9b2c_JaffaCakes118
-
Size
743KB
-
MD5
e102bea25badab3d5a50bd9c149f9b2c
-
SHA1
94cd6ded9f448da345e19c7a9da573bc5e1948b4
-
SHA256
c5690ad3a8162f76b660bcfaa6e6d12914bb56cdd49f552487bcffadfb52ef20
-
SHA512
b9c24e5a8905e4519568f705e364a903c5cd21cc8bde782686bbf82fcf6aedfb4c140a057e8f007261473903d046fade984da596dd2d79b9996a5cf9d3625b49
-
SSDEEP
12288:zwb9Bi/ggFrH1mYfBJGkP+Su4lGhOagZGRnoDutcq1:zMi4I7oYfBglTjhOhARnrtcS
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-