General
-
Target
f6a0e1e005aa5078dcee3d2096064d36_JaffaCakes118
-
Size
402KB
-
Sample
240925-xa4v8athke
-
MD5
f6a0e1e005aa5078dcee3d2096064d36
-
SHA1
d6d2a4d0658897034ad99dd6bdb0c31e43f0a7e5
-
SHA256
b1a699ff4608a658fcf699fee733f9216cce06ba58e66d0a93dafde657a128b7
-
SHA512
9f23ac9a97875346ee8bacddc58231ef2bab82cade763bc8bd4b4f61b39560c28d100879c8f3ec6b8a92144a3a42b772de628ed4ba36f9303b757cd399c933fb
-
SSDEEP
12288:YKsO4lcbdjFPqf6p6FJ6o2nTloHsvfO9Z+mVSrdweDvDWnXoseJO:YKsSd5CfdFJv2poMHO9wrqJXR
Static task
static1
Behavioral task
behavioral1
Sample
f6a0e1e005aa5078dcee3d2096064d36_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6a0e1e005aa5078dcee3d2096064d36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f6a0e1e005aa5078dcee3d2096064d36_JaffaCakes118
-
Size
402KB
-
MD5
f6a0e1e005aa5078dcee3d2096064d36
-
SHA1
d6d2a4d0658897034ad99dd6bdb0c31e43f0a7e5
-
SHA256
b1a699ff4608a658fcf699fee733f9216cce06ba58e66d0a93dafde657a128b7
-
SHA512
9f23ac9a97875346ee8bacddc58231ef2bab82cade763bc8bd4b4f61b39560c28d100879c8f3ec6b8a92144a3a42b772de628ed4ba36f9303b757cd399c933fb
-
SSDEEP
12288:YKsO4lcbdjFPqf6p6FJ6o2nTloHsvfO9Z+mVSrdweDvDWnXoseJO:YKsSd5CfdFJv2poMHO9wrqJXR
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-