General
-
Target
ea2d40381b1c68070db71dadd170eff1_JaffaCakes118
-
Size
86KB
-
Sample
241213-gh8alsznaz
-
MD5
ea2d40381b1c68070db71dadd170eff1
-
SHA1
5f53767f22319bc717fe9f2fd81d737fa8855e99
-
SHA256
89fb932451a6666919926ca0255d9e250d1f53f3b3c9d9e3f5b770e9aa490be7
-
SHA512
fa136b674a542fa7e326edca01a182cc051cd9503af6a02ca61efa760af2eceac6446d98d9f1471291b265d6d3c325ed9278d0afe5d6800ad78ba253e737ecd0
-
SSDEEP
768:78Jqh2/DRlS2R2Q8ExPtsTNXfmW/uDs8jr3333333rl3l8IkNxqTkm580oocyZ4i:FhqzJFCNvmWGDjSpT8ZT4wrpDG3mR
Behavioral task
behavioral1
Sample
ea2d40381b1c68070db71dadd170eff1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea2d40381b1c68070db71dadd170eff1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
ea2d40381b1c68070db71dadd170eff1_JaffaCakes118
-
Size
86KB
-
MD5
ea2d40381b1c68070db71dadd170eff1
-
SHA1
5f53767f22319bc717fe9f2fd81d737fa8855e99
-
SHA256
89fb932451a6666919926ca0255d9e250d1f53f3b3c9d9e3f5b770e9aa490be7
-
SHA512
fa136b674a542fa7e326edca01a182cc051cd9503af6a02ca61efa760af2eceac6446d98d9f1471291b265d6d3c325ed9278d0afe5d6800ad78ba253e737ecd0
-
SSDEEP
768:78Jqh2/DRlS2R2Q8ExPtsTNXfmW/uDs8jr3333333rl3l8IkNxqTkm580oocyZ4i:FhqzJFCNvmWGDjSpT8ZT4wrpDG3mR
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-