General
-
Target
07665c23ca68173f7490e11482c898ae_JaffaCakes118
-
Size
18KB
-
Sample
240620-s5e35avfmf
-
MD5
07665c23ca68173f7490e11482c898ae
-
SHA1
358bfb2d3f364d99b7a0699e07a763d4b06ccfb5
-
SHA256
a6de0c5b37fde764b88464df279ebef8f98dcb55e2972240be32327837987555
-
SHA512
086387998f5345121e1bece26e93e33381dde4a39bac3ee5dae561d822d5a9d860aba5b2572d957fa84a3960a00448c06f0a67cd57acaaf39d66042ea3160ef5
-
SSDEEP
384:bwM8LEwbriEgjoES76z3h/jpiT2fkn9fHiSNf0ve0OxCGGqrt8YKvITtK9C:k3LEyts0GtdIVfiSN820OxPtrHKK8C
Static task
static1
Behavioral task
behavioral1
Sample
07665c23ca68173f7490e11482c898ae_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07665c23ca68173f7490e11482c898ae_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
07665c23ca68173f7490e11482c898ae_JaffaCakes118
-
Size
18KB
-
MD5
07665c23ca68173f7490e11482c898ae
-
SHA1
358bfb2d3f364d99b7a0699e07a763d4b06ccfb5
-
SHA256
a6de0c5b37fde764b88464df279ebef8f98dcb55e2972240be32327837987555
-
SHA512
086387998f5345121e1bece26e93e33381dde4a39bac3ee5dae561d822d5a9d860aba5b2572d957fa84a3960a00448c06f0a67cd57acaaf39d66042ea3160ef5
-
SSDEEP
384:bwM8LEwbriEgjoES76z3h/jpiT2fkn9fHiSNf0ve0OxCGGqrt8YKvITtK9C:k3LEyts0GtdIVfiSN820OxPtrHKK8C
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-