General
-
Target
06abc9cd210a26469e2fffa2c9a857c1_JaffaCakes118
-
Size
22KB
-
Sample
240620-rertka1fpc
-
MD5
06abc9cd210a26469e2fffa2c9a857c1
-
SHA1
8ff9e7a4c47ffba86a2a95d33b8d155881e992ee
-
SHA256
0d460be04f6a0b7f27f801f1155ec55c97d603f8aa0f51c465fc289fd3d089f7
-
SHA512
01ff0d60c7cf65efa33fd76536f9c5a711134361bd82f5c4cfe3099533888ccfb2df71832867b9327cb19b204bd7042a7aca457755798a3b9bfa044d280fd3f2
-
SSDEEP
384:i3dFCD29HoKi5bNazDeme+dRsEJx1UEh9cLZTm0ERHB/yRWR+:APCD6Xi5xazDvdRswfUW9YZoRHBMW8
Static task
static1
Behavioral task
behavioral1
Sample
06abc9cd210a26469e2fffa2c9a857c1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06abc9cd210a26469e2fffa2c9a857c1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
06abc9cd210a26469e2fffa2c9a857c1_JaffaCakes118
-
Size
22KB
-
MD5
06abc9cd210a26469e2fffa2c9a857c1
-
SHA1
8ff9e7a4c47ffba86a2a95d33b8d155881e992ee
-
SHA256
0d460be04f6a0b7f27f801f1155ec55c97d603f8aa0f51c465fc289fd3d089f7
-
SHA512
01ff0d60c7cf65efa33fd76536f9c5a711134361bd82f5c4cfe3099533888ccfb2df71832867b9327cb19b204bd7042a7aca457755798a3b9bfa044d280fd3f2
-
SSDEEP
384:i3dFCD29HoKi5bNazDeme+dRsEJx1UEh9cLZTm0ERHB/yRWR+:APCD6Xi5xazDvdRswfUW9YZoRHBMW8
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-