General
-
Target
JaffaCakes118_7a94981dc00b6dbe62a78544e350472f
-
Size
106KB
-
Sample
250104-th6g8swnfs
-
MD5
7a94981dc00b6dbe62a78544e350472f
-
SHA1
c77b83fa145c88c25b564f310974afc5edfd72f6
-
SHA256
fbe2a044e71a3b19dd7ff92d0d8ed83ceeeb555d3b3f488d4583f09bda51f44a
-
SHA512
94534fac3d9d6b30e79c394f6ccfc51bbf4a82f9cf7246f5dfe95729a10591703858a3782e294860c884575a6be717035386531f9dedb1b345247d888380ce9e
-
SSDEEP
3072:6qH7TxlGJ/lRD7qjWqMkKCqkS4wFQU6j+I4tAIsV:HH3bgqCqnKcS4gQcIMLsV
Behavioral task
behavioral1
Sample
JaffaCakes118_7a94981dc00b6dbe62a78544e350472f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7a94981dc00b6dbe62a78544e350472f.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_7a94981dc00b6dbe62a78544e350472f
-
Size
106KB
-
MD5
7a94981dc00b6dbe62a78544e350472f
-
SHA1
c77b83fa145c88c25b564f310974afc5edfd72f6
-
SHA256
fbe2a044e71a3b19dd7ff92d0d8ed83ceeeb555d3b3f488d4583f09bda51f44a
-
SHA512
94534fac3d9d6b30e79c394f6ccfc51bbf4a82f9cf7246f5dfe95729a10591703858a3782e294860c884575a6be717035386531f9dedb1b345247d888380ce9e
-
SSDEEP
3072:6qH7TxlGJ/lRD7qjWqMkKCqkS4wFQU6j+I4tAIsV:HH3bgqCqnKcS4gQcIMLsV
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-