General
- Target jaffacakes118_22a7fa3a55ed983edab7d937e35082370eac0c7216137e64f5b675406a30f223.bin
- Size 520KB
- Sample260912-mvs94sfl7z
- SHA256 22a7fa3a55ed983edab7d937e35082370eac0c7216137e64f5b675406a30f223
- MD5 dcef67936d6ad9a06efad630671e7edf
- SHA1 5aeec2af171703008dd72a2ea76afc440afd57eb
- SHA512 0096e046fdf3bd827574f77fa4547a9014a73dc971d1bdd8987ae7623a4c83f9b446a08bbafa1066a6fe90b8b09d1747ca867f68a31fbd3ebdab708b16806ac0
- SSDEEP 12288:pwOlr/QjDMjVF2qawmYx1005d+gmeUDUMwT+dbM9QK0y:KON/Qj2F2NH05gbDAmbMmK
- TLSH T1E2B4237B4227C8A8C4C4177E216E68F4D154FCC941FA247247A953B83EAF3988F6E6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_22a7fa3a55ed983edab7d937e35082370eac0c7216137e64f5b675406a30f223.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_22a7fa3a55ed983edab7d937e35082370eac0c7216137e64f5b675406a30f223.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_22a7fa3a55ed983edab7d937e35082370eac0c7216137e64f5b675406a30f223.bin
- Size 520KB
- SHA256 22a7fa3a55ed983edab7d937e35082370eac0c7216137e64f5b675406a30f223
- MD5 dcef67936d6ad9a06efad630671e7edf
- SHA1 5aeec2af171703008dd72a2ea76afc440afd57eb
- SHA512 0096e046fdf3bd827574f77fa4547a9014a73dc971d1bdd8987ae7623a4c83f9b446a08bbafa1066a6fe90b8b09d1747ca867f68a31fbd3ebdab708b16806ac0
- SSDEEP 12288:pwOlr/QjDMjVF2qawmYx1005d+gmeUDUMwT+dbM9QK0y:KON/Qj2F2NH05gbDAmbMmK
- TLSH T1E2B4237B4227C8A8C4C4177E216E68F4D154FCC941FA247247A953B83EAF3988F6E6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.