General
-
Target
23ada7cab06affc47d8a17838a55ac07_JaffaCakes118
-
Size
21KB
-
Sample
240703-2g23es1dqb
-
MD5
23ada7cab06affc47d8a17838a55ac07
-
SHA1
272acecc07b0d027231f03edb64878f983cdc007
-
SHA256
ac136392332e2c9269783247ac3bdc9d047de97ca094d391d45af16656082d88
-
SHA512
0f4fb58219592b04ac7dabc5216ab300e43b7cdfb6c1036a30d3a9776f3bc60d682aa3ebc7bbe83e563ec9246ab6ffc571fcea6eefca40a62c74eaa8a009b948
-
SSDEEP
384:jyqNdGOud6YmNCBVWL3y3IpL70G5+44kYtw0TJTcjKfDVdYmUHb5Ky:jfNdzzCBIL3SwUGJHdahdPU7Ey
Static task
static1
Behavioral task
behavioral1
Sample
23ada7cab06affc47d8a17838a55ac07_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23ada7cab06affc47d8a17838a55ac07_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
23ada7cab06affc47d8a17838a55ac07_JaffaCakes118
-
Size
21KB
-
MD5
23ada7cab06affc47d8a17838a55ac07
-
SHA1
272acecc07b0d027231f03edb64878f983cdc007
-
SHA256
ac136392332e2c9269783247ac3bdc9d047de97ca094d391d45af16656082d88
-
SHA512
0f4fb58219592b04ac7dabc5216ab300e43b7cdfb6c1036a30d3a9776f3bc60d682aa3ebc7bbe83e563ec9246ab6ffc571fcea6eefca40a62c74eaa8a009b948
-
SSDEEP
384:jyqNdGOud6YmNCBVWL3y3IpL70G5+44kYtw0TJTcjKfDVdYmUHb5Ky:jfNdzzCBIL3SwUGJHdahdPU7Ey
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-