Behavioral task
behavioral1
Sample
2d42bd69d9c130ff762292a07f380c8f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d42bd69d9c130ff762292a07f380c8f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d42bd69d9c130ff762292a07f380c8f_JaffaCakes118
-
Size
86KB
-
MD5
2d42bd69d9c130ff762292a07f380c8f
-
SHA1
c0f379765c9d6b1d2c343df5721d406f07470e38
-
SHA256
fb98a00c11041b66eb18d23896e55de249f62f0f8ba97ff349ab4d0b84b2d52b
-
SHA512
bedbb2cc82a93480c878a67e5a09963fac3f5a1da262ee27d08f9b4af196d3c35450ccccbfc40837d6c820c0ec52d54b999310a7aa3665f07ec3a2e54bf96971
-
SSDEEP
1536:Y3qvE2md1SyJ9CDE2LBP/zQxQFhVHlq/7ZDs1Q9icrhCb4qTtDLpC5b:n981S28PXzQxQjVHlq9Ds1Q9BrhCb4ek
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d42bd69d9c130ff762292a07f380c8f_JaffaCakes118
Files
-
2d42bd69d9c130ff762292a07f380c8f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 744B - Virtual size: 744B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE