General
-
Target
e6de2bdeea2f1c8721ef78d3960c70c7_JaffaCakes118
-
Size
554KB
-
Sample
240917-p6jwxstenh
-
MD5
e6de2bdeea2f1c8721ef78d3960c70c7
-
SHA1
56ab556eed9657fa54140c646cd3f0ee9ab2fee2
-
SHA256
bdfc7861cfcde52b6a99fdae26f8fc2a69adc91f6dab2b0790f3d63fd8321048
-
SHA512
8b56720ba6ad993d1781348778a73a28acb80cf3f5f4250ae3f30b364d0788cefeccd34e701a6e40518bdf380b8033191ef01a12f1e70df99d983f3400ed9cff
-
SSDEEP
6144:4p2ud3CIko0UuLpkqkfPcvgKW4ugtTHI1ZNpWLJAhS15M0cg3dn:4gOSZUckzKvNtbsPpGIaG0cg3B
Static task
static1
Behavioral task
behavioral1
Sample
e6de2bdeea2f1c8721ef78d3960c70c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e6de2bdeea2f1c8721ef78d3960c70c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e6de2bdeea2f1c8721ef78d3960c70c7_JaffaCakes118
-
Size
554KB
-
MD5
e6de2bdeea2f1c8721ef78d3960c70c7
-
SHA1
56ab556eed9657fa54140c646cd3f0ee9ab2fee2
-
SHA256
bdfc7861cfcde52b6a99fdae26f8fc2a69adc91f6dab2b0790f3d63fd8321048
-
SHA512
8b56720ba6ad993d1781348778a73a28acb80cf3f5f4250ae3f30b364d0788cefeccd34e701a6e40518bdf380b8033191ef01a12f1e70df99d983f3400ed9cff
-
SSDEEP
6144:4p2ud3CIko0UuLpkqkfPcvgKW4ugtTHI1ZNpWLJAhS15M0cg3dn:4gOSZUckzKvNtbsPpGIaG0cg3B
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-