Behavioral task
behavioral1
Sample
220a7af3b2583aa2d601d6994430537e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
220a7af3b2583aa2d601d6994430537e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
220a7af3b2583aa2d601d6994430537e_JaffaCakes118
-
Size
293KB
-
MD5
220a7af3b2583aa2d601d6994430537e
-
SHA1
9b9162ef19a48d4840e32c5aee025be9b815766a
-
SHA256
ecb6bfb9988a2e4aff147d15637fff2c227975c89a92685144e1d366eb1c1458
-
SHA512
b7f094eb55fd1363b418ec8b4b16d9fc66c632579f950b188eb55c4aedcaa8504442092990101e099177d39785bfec0efbf6286ab92f437702b7d405136a8824
-
SSDEEP
6144:/VdYzgzJeg/3rnNi0dsQVwuCyvUkve4nUwTC0NPsqcWN:zWgfrnvvjUKEqz
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 220a7af3b2583aa2d601d6994430537e_JaffaCakes118
Files
-
220a7af3b2583aa2d601d6994430537e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ