General
-
Target
ab3144d57be7ba454b2d14ee748475ca_JaffaCakes118
-
Size
412KB
-
Sample
241128-gd8etaxnc1
-
MD5
ab3144d57be7ba454b2d14ee748475ca
-
SHA1
1fa0a2ebac016bd10c01decfcd29a1a0cc5add21
-
SHA256
5a20530a9caad1d18716c41a2f63c0ae69bd19553b8e896c9ec39075b1b64d35
-
SHA512
eba8cd84cd46e40a5d5a042e8ba7b19d2e16a9e3ee4e9eb9169cc0068d1698ecf5cf56741c473d9c1cfc9cc95fa1703783972923a932ad1cf95e55688d2aa588
-
SSDEEP
12288:HRVonqo83gzX7j6jOt4Y7Z5tqGOcmektNO:HR+n8s36KtBl5tAcmeYU
Static task
static1
Behavioral task
behavioral1
Sample
ab3144d57be7ba454b2d14ee748475ca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ab3144d57be7ba454b2d14ee748475ca_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
ab3144d57be7ba454b2d14ee748475ca_JaffaCakes118
-
Size
412KB
-
MD5
ab3144d57be7ba454b2d14ee748475ca
-
SHA1
1fa0a2ebac016bd10c01decfcd29a1a0cc5add21
-
SHA256
5a20530a9caad1d18716c41a2f63c0ae69bd19553b8e896c9ec39075b1b64d35
-
SHA512
eba8cd84cd46e40a5d5a042e8ba7b19d2e16a9e3ee4e9eb9169cc0068d1698ecf5cf56741c473d9c1cfc9cc95fa1703783972923a932ad1cf95e55688d2aa588
-
SSDEEP
12288:HRVonqo83gzX7j6jOt4Y7Z5tqGOcmektNO:HR+n8s36KtBl5tAcmeYU
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-