General
-
Target
b4d46663e367a4c2e33bf1ad19455649_JaffaCakes118
-
Size
374KB
-
Sample
241130-fbc1fssqf1
-
MD5
b4d46663e367a4c2e33bf1ad19455649
-
SHA1
b27633d806ee8c17c9b7b8bac32fd5d0dba763a9
-
SHA256
c10b7a4ace89b8b2e90b304a8a9947f896bb34c0aec099f22086d3a552b8fe15
-
SHA512
98b0e9fde31ef0cab83f409693dd7cdd7ed7ecdc53d469a606d58c56d9fa194467df63d550101331d1511bfaf73ec9923700c854038fddeee2b5d20635ec0343
-
SSDEEP
6144:PXUkXbIZIq83/yVskp5Mq6OwbI8YVn8YU3gg6j8VL4VVcgvc/onfzrwOLDtme0X6:s4IZa/y9ghOw0lZU3gb4SmwcgfzLDT0q
Static task
static1
Behavioral task
behavioral1
Sample
b4d46663e367a4c2e33bf1ad19455649_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
b4d46663e367a4c2e33bf1ad19455649_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
b4d46663e367a4c2e33bf1ad19455649_JaffaCakes118
-
Size
374KB
-
MD5
b4d46663e367a4c2e33bf1ad19455649
-
SHA1
b27633d806ee8c17c9b7b8bac32fd5d0dba763a9
-
SHA256
c10b7a4ace89b8b2e90b304a8a9947f896bb34c0aec099f22086d3a552b8fe15
-
SHA512
98b0e9fde31ef0cab83f409693dd7cdd7ed7ecdc53d469a606d58c56d9fa194467df63d550101331d1511bfaf73ec9923700c854038fddeee2b5d20635ec0343
-
SSDEEP
6144:PXUkXbIZIq83/yVskp5Mq6OwbI8YVn8YU3gg6j8VL4VVcgvc/onfzrwOLDtme0X6:s4IZa/y9ghOw0lZU3gb4SmwcgfzLDT0q
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-