General
-
Target
22e2e9ba0d5b31eda503bf72ba0e896c_JaffaCakes118
-
Size
291KB
-
Sample
240703-s3887axand
-
MD5
22e2e9ba0d5b31eda503bf72ba0e896c
-
SHA1
3a9cd692943ba20de839ca9df8eea4359b4eae81
-
SHA256
611ac32c080a9ce466f7e51e7aa911f648a68b8037a5a5eed0c6f6c780aa3ab8
-
SHA512
f27bae08a6e5f95db1f10ebdd2556ca09a2a23319b0a3ba944eddcc2a73ec7742ded9194655f8274a70dc15dd2dbc16fd9c36a31006b6a614e412cbf261f9d22
-
SSDEEP
6144:PE0Vm/Wtq8qKOPvNxGCLIfWKdB6VzoMDD1HyeqftHJboIkRDMCjQ:bVdXQvNxLY/dB2DUeqlpcIko
Static task
static1
Behavioral task
behavioral1
Sample
22e2e9ba0d5b31eda503bf72ba0e896c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
22e2e9ba0d5b31eda503bf72ba0e896c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
22e2e9ba0d5b31eda503bf72ba0e896c_JaffaCakes118
-
Size
291KB
-
MD5
22e2e9ba0d5b31eda503bf72ba0e896c
-
SHA1
3a9cd692943ba20de839ca9df8eea4359b4eae81
-
SHA256
611ac32c080a9ce466f7e51e7aa911f648a68b8037a5a5eed0c6f6c780aa3ab8
-
SHA512
f27bae08a6e5f95db1f10ebdd2556ca09a2a23319b0a3ba944eddcc2a73ec7742ded9194655f8274a70dc15dd2dbc16fd9c36a31006b6a614e412cbf261f9d22
-
SSDEEP
6144:PE0Vm/Wtq8qKOPvNxGCLIfWKdB6VzoMDD1HyeqftHJboIkRDMCjQ:bVdXQvNxLY/dB2DUeqlpcIko
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-