General

  • Target

    0c61272c28ead2514252692587911331_JaffaCakes118

  • Size

    12.6MB

  • MD5

    0c61272c28ead2514252692587911331

  • SHA1

    fd60d3d31c54f3a259fdca589f425084fb04438d

  • SHA256

    8e5fa699043793694cac69970b308a0b4760d69ab4b7165551c11dfd63d194f3

  • SHA512

    b19d3b64b25f6f01e77c79479cdd58a49a1bd40ecb80feb3cc8454ebe17c55ed85e3a81061d43969555f379e086d28c742b44f025bfd7b8ff949dbcaa5a33eac

  • SSDEEP

    393216:2NKib/yAsEun8NgJJYZL+gD6OZlvWJ+R14AAbBn2tkl:2IK/yASVALn6f+IRnqkl

Score
10/10

Malware Config

Signatures

  • ModiLoader First Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 99 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c61272c28ead2514252692587911331_JaffaCakes118
    .zip
  • tapi/bpl/DclRx6.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/Dclent40.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/FlatStyle_D6.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/Idl2PasWizardPkg.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/Indy60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/Osgdcld6.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/RealGrid6.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/RealGridDB6.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/RealGridEX6.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/Vclent40.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/XDBGrid60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/adortl60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/applet60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/bdertl60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/borlndmm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/clxdesigner60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/corbaide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/coreide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dbrtl60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dbwebxprt.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dbx60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dcl31w60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclIndy60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclact60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclado60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclaxserver60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclbde60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclbdecds60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclcds60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclclxdb60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclclxstd60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dcldb60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dcldbx60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dcldbxcds60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dcldss60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclemacsedit60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclib60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclie60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclisp60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclite60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclmcn60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclmid60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclnet60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclnmf60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclocx60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dcloffice2k60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclqrt60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclshlctrls60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclsmp60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclsmpedit60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclsoap60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclstd60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dcltee60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dcltqr60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclusr60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclwbm60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dclwebsnap60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/delphiclxide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/delphicorba60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/delphide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/delphient60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/delphihtm60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/delphipro60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/designdgm60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/designide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dfm60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/direct60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/dsnap60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/irais.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/irais2.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/itecore60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/iteide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/midas.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    eddb7e47f4231b6f1d4357541f93cb6f


    Headers

    Imports

    Exports

    Sections

  • tapi/bpl/odet30.dll
    .dll windows:4 windows x86 arch:x86

    578198a04b650deab18beb6a86aeb56a


    Headers

    Imports

    Exports

    Sections

  • tapi/bpl/osg6220.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/pass2002.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/proide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/qrpt60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/qtintf.dll
    .dll windows:4 windows x86 arch:x86

    ed2e9704a88ac23cf71d7afbae3ece78


    Headers

    Imports

    Exports

    Sections

  • tapi/bpl/rc60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/rtl60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/rxctl6.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/stride60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/tlib60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/vcl60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/vcldb60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/vclhie60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/vclide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/vclie60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/vcljpg60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/vclsmp60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/vclx60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/visualclx60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/bpl/xmlide60.bpl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • tapi/dll/HAIMTest(Shutter).exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • tapi/dll/HAIMTest.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • tapi/dll/Haim.Dll
    .dll windows:4 windows x86 arch:x86

    0bb129581fb2720eed07fccd3295e7c5


    Headers

    Imports

    Exports

    Sections

  • tapi/dll/HaimTest().exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • tapi/dll/IS2000_TestPG_Function.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • tapi/ini/MainSetup.ini