General
-
Target
026e6b7587d74eaf2541312e58cbcb16_JaffaCakes118
-
Size
548KB
-
Sample
240620-d27lms1brj
-
MD5
026e6b7587d74eaf2541312e58cbcb16
-
SHA1
114e256af23b8f70e2d74c53a791f9d87211cd2f
-
SHA256
a3751773e45f1c053a46d24fddb6e28761730a1220cf3b984ee9a509268426f3
-
SHA512
de50df70140b13a2e3a2f5abc1b9a39bd93aea6febb94403b5b947f15bd317a37f9c4a60ba4959113cc2b0b462afb06121b2e289fd6c8c907c5be4c3f32f844f
-
SSDEEP
12288:Zq6rNnJcjLzuMc2Bt+ajBcxy3+F3Z4mxxvK6e4MTJU/hj:ZnRJa3aWdjBiQmXvuNq/N
Static task
static1
Behavioral task
behavioral1
Sample
026e6b7587d74eaf2541312e58cbcb16_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
026e6b7587d74eaf2541312e58cbcb16_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
026e6b7587d74eaf2541312e58cbcb16_JaffaCakes118
-
Size
548KB
-
MD5
026e6b7587d74eaf2541312e58cbcb16
-
SHA1
114e256af23b8f70e2d74c53a791f9d87211cd2f
-
SHA256
a3751773e45f1c053a46d24fddb6e28761730a1220cf3b984ee9a509268426f3
-
SHA512
de50df70140b13a2e3a2f5abc1b9a39bd93aea6febb94403b5b947f15bd317a37f9c4a60ba4959113cc2b0b462afb06121b2e289fd6c8c907c5be4c3f32f844f
-
SSDEEP
12288:Zq6rNnJcjLzuMc2Bt+ajBcxy3+F3Z4mxxvK6e4MTJU/hj:ZnRJa3aWdjBiQmXvuNq/N
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-