General
-
Target
0788c37203ee42e831037748ff1ab552_JaffaCakes118
-
Size
24KB
-
Sample
240620-tf394awckc
-
MD5
0788c37203ee42e831037748ff1ab552
-
SHA1
979580f8d6458375076a2908e952a8f46e296f7f
-
SHA256
fc0768c35c5e49f0dd72e7039034d6b5b58cd053532172ca7876cd9b5f3255d4
-
SHA512
1b24574bd34a77d1bbb15c2a82ae26e1472fcb2f355c4b40ec3b301b1444b3442568a1a77a33bd5deeedf8f129b8f3630316a566afb9ce8dc98049b2e37ef2a0
-
SSDEEP
384:1Kj7Wmqzu/RQ+mLyvXYu5+z0Y3w9mTKNoHBFe4K08EJCo8UAWP+Pl+HGSR:4jh+upC2/kzw92Fe3zZaAblQ
Static task
static1
Behavioral task
behavioral1
Sample
0788c37203ee42e831037748ff1ab552_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0788c37203ee42e831037748ff1ab552_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
0788c37203ee42e831037748ff1ab552_JaffaCakes118
-
Size
24KB
-
MD5
0788c37203ee42e831037748ff1ab552
-
SHA1
979580f8d6458375076a2908e952a8f46e296f7f
-
SHA256
fc0768c35c5e49f0dd72e7039034d6b5b58cd053532172ca7876cd9b5f3255d4
-
SHA512
1b24574bd34a77d1bbb15c2a82ae26e1472fcb2f355c4b40ec3b301b1444b3442568a1a77a33bd5deeedf8f129b8f3630316a566afb9ce8dc98049b2e37ef2a0
-
SSDEEP
384:1Kj7Wmqzu/RQ+mLyvXYu5+z0Y3w9mTKNoHBFe4K08EJCo8UAWP+Pl+HGSR:4jh+upC2/kzw92Fe3zZaAblQ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-