General
-
Target
JaffaCakes118_0470af82be89a7ca16628a3750453401
-
Size
640KB
-
Sample
250121-pbgs3stkam
-
MD5
0470af82be89a7ca16628a3750453401
-
SHA1
8eeb97aeb8ebb41b63650659a55d88c6f7ad92b7
-
SHA256
e0912d7f0f40b32c82157922b2358a7e12824d0c0351a0671b7baf2f21edf28a
-
SHA512
9e43deede1d408f7fc4918ae08225482c2eedfd96a93542aab1b565bca01a10359b50e8ac56f5e278ed54850136585a68ecfad7f4cf420560c69bf3db908c4e2
-
SSDEEP
12288:R4C1xb9p/uc66E2ksUEVXUgP6E/i2r/NINv5MNf7CYvQTbi6MD3Ae8+zruilcr4z:R3CCVXUgPw2r/NINyNfxvQTberpzK69F
Behavioral task
behavioral1
Sample
JaffaCakes118_0470af82be89a7ca16628a3750453401.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0470af82be89a7ca16628a3750453401.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_0470af82be89a7ca16628a3750453401
-
Size
640KB
-
MD5
0470af82be89a7ca16628a3750453401
-
SHA1
8eeb97aeb8ebb41b63650659a55d88c6f7ad92b7
-
SHA256
e0912d7f0f40b32c82157922b2358a7e12824d0c0351a0671b7baf2f21edf28a
-
SHA512
9e43deede1d408f7fc4918ae08225482c2eedfd96a93542aab1b565bca01a10359b50e8ac56f5e278ed54850136585a68ecfad7f4cf420560c69bf3db908c4e2
-
SSDEEP
12288:R4C1xb9p/uc66E2ksUEVXUgP6E/i2r/NINv5MNf7CYvQTbi6MD3Ae8+zruilcr4z:R3CCVXUgPw2r/NINyNfxvQTberpzK69F
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-