General
-
Target
dfc5eb7c41688087dd47d68d6886232a_JaffaCakes118
-
Size
456KB
-
Sample
240914-jqlspatgjd
-
MD5
dfc5eb7c41688087dd47d68d6886232a
-
SHA1
2b24af7823fe3efd9058a7244ea4c2a6d871f527
-
SHA256
6fcf6855872b2da7ae726357454b52c8da4d694124e87f71bb34eac2d7893645
-
SHA512
5fc4d7640e493761b6b7535258fa82ac87a5891dd05b188f2c075b9ebcf5064efeb8d4f4f09e5a9ed9fe638a6a01ae215423f7bd4c4e2d639a655ec578f0214a
-
SSDEEP
12288:Kctw2LaGxhPz63MaFQyfOsbKabiIQPZnj:gyPz63DQyqQS
Static task
static1
Behavioral task
behavioral1
Sample
dfc5eb7c41688087dd47d68d6886232a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfc5eb7c41688087dd47d68d6886232a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
dfc5eb7c41688087dd47d68d6886232a_JaffaCakes118
-
Size
456KB
-
MD5
dfc5eb7c41688087dd47d68d6886232a
-
SHA1
2b24af7823fe3efd9058a7244ea4c2a6d871f527
-
SHA256
6fcf6855872b2da7ae726357454b52c8da4d694124e87f71bb34eac2d7893645
-
SHA512
5fc4d7640e493761b6b7535258fa82ac87a5891dd05b188f2c075b9ebcf5064efeb8d4f4f09e5a9ed9fe638a6a01ae215423f7bd4c4e2d639a655ec578f0214a
-
SSDEEP
12288:Kctw2LaGxhPz63MaFQyfOsbKabiIQPZnj:gyPz63DQyqQS
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-