General
-
Target
JaffaCakes118_64b3c522642af299ade601eef582209f
-
Size
707KB
-
Sample
250115-3gq6lazlgs
-
MD5
64b3c522642af299ade601eef582209f
-
SHA1
5033ddf6015e6809ff3603c9f2e54fa158f4497f
-
SHA256
69d15495a3c2f152946ea40606b916b4ea61e4e88e1dbfe1ce7287b66c69650d
-
SHA512
412fd8ca582187e941f658ebf9fa65dd63526ffc41f020179b96864903bcb800b1831c3243ca677a6e86e961e67c1e0f808f9e6e772a9e57c0166a3d533f3ab8
-
SSDEEP
12288:Uc//////H00msiGLOV4gf0PegUbPcRLa26m0P5xYSNtcLsVCJOWhH:Uc//////HVKb/fwegUbcJQ/YSNtcL1Jx
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_64b3c522642af299ade601eef582209f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_64b3c522642af299ade601eef582209f.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_64b3c522642af299ade601eef582209f
-
Size
707KB
-
MD5
64b3c522642af299ade601eef582209f
-
SHA1
5033ddf6015e6809ff3603c9f2e54fa158f4497f
-
SHA256
69d15495a3c2f152946ea40606b916b4ea61e4e88e1dbfe1ce7287b66c69650d
-
SHA512
412fd8ca582187e941f658ebf9fa65dd63526ffc41f020179b96864903bcb800b1831c3243ca677a6e86e961e67c1e0f808f9e6e772a9e57c0166a3d533f3ab8
-
SSDEEP
12288:Uc//////H00msiGLOV4gf0PegUbPcRLa26m0P5xYSNtcLsVCJOWhH:Uc//////HVKb/fwegUbcJQ/YSNtcL1Jx
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-