Behavioral task
behavioral1
Sample
2de8fc171cc0f25e9a1d846673de3541_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2de8fc171cc0f25e9a1d846673de3541_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2de8fc171cc0f25e9a1d846673de3541_JaffaCakes118
-
Size
41KB
-
MD5
2de8fc171cc0f25e9a1d846673de3541
-
SHA1
d330428ae868f79410f18904210f955d33a61d62
-
SHA256
77763c872b8594597ebc5cf0725ae4a02b1d7bae99a12523af15433e65e75cf5
-
SHA512
066d7df2f8081e974836cc9c180e36f66b4bb0d00e213954992c5d9bf0425120c077c21ba0a19a031fbbd1c88a490806f2a8722c8d61bc45c6bf2969aefe8265
-
SSDEEP
768:JovUucT5upz6pVY5LOEG1faTazBlashFVEPgNnRWiqDw0M9QuZ:CvfcdYz0Y5WiWzBlasPVhNn6DwAuZ
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2de8fc171cc0f25e9a1d846673de3541_JaffaCakes118
Files
-
2de8fc171cc0f25e9a1d846673de3541_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�jy}0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�jy}1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�jy}2 Size: 40KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE