General
- Target 20a58a76da453c0abdffab4f6fdf89f4_JaffaCakes118
- Size 672KB
- Sample240703-b3fhfa1blf
- SHA256 978c0a59027d2ca19ae0a4cebb5e60d0397d9e8430d3cf0c24337c2158199875
- MD5 20a58a76da453c0abdffab4f6fdf89f4
- SHA1 a3695341568c2695c345de78c7b016b3d0456525
- SHA512 11ddecc4fe8ce8e36bd7810db2fd95c4fd4966ef0b693e6098fd712fc95d3862c6a3feb0b61feb2115a6ac24ff10d7f35e94f63365ae8dd785ef00195770a348
- SSDEEP 12288:GFpk6Tu9hm/f3LOujcMFCeSzMN5XRiYxLL0I1uhaccuTsK:eivbm/jOz+CV05XxNuhaccuT/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
20a58a76da453c0abdffab4f6fdf89f4_JaffaCakes118.exe
Resource
win7-20240508-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
20a58a76da453c0abdffab4f6fdf89f4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 20a58a76da453c0abdffab4f6fdf89f4_JaffaCakes118
- Size 672KB
- SHA256 978c0a59027d2ca19ae0a4cebb5e60d0397d9e8430d3cf0c24337c2158199875
- MD5 20a58a76da453c0abdffab4f6fdf89f4
- SHA1 a3695341568c2695c345de78c7b016b3d0456525
- SHA512 11ddecc4fe8ce8e36bd7810db2fd95c4fd4966ef0b693e6098fd712fc95d3862c6a3feb0b61feb2115a6ac24ff10d7f35e94f63365ae8dd785ef00195770a348
- SSDEEP 12288:GFpk6Tu9hm/f3LOujcMFCeSzMN5XRiYxLL0I1uhaccuTsK:eivbm/jOz+CV05XxNuhaccuT/
- MD5 SHA1 SHA512 SSDEEP
Score10/10ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
ModiLoader Second Stage
Drops file in System32 directory