General
-
Target
32bf2d466325ca12c5e94dd27d695c3d_JaffaCakes118
-
Size
496KB
-
Sample
240710-bmntwayhqg
-
MD5
32bf2d466325ca12c5e94dd27d695c3d
-
SHA1
3aa3dedaa3d63e800cd453e099e223ccd5660ddc
-
SHA256
4a93f6ff37174af5e5f36d3ce8f0ba0ebf77f4ace0a1b5187452435044bbbad7
-
SHA512
3ce90c98b59cc72a4ef9080b47b57aac4675f1fad546d1cc9b838f687216b815f2ad59a3c1b4d235e954726d5652fd9d797037d4e4ee8e2b524609dd8eea9ba5
-
SSDEEP
12288:RWI2OzYJD8eZ3WH/4F3Z4mxxgoEtlK+kt9T2MF:RaOMJjAHgQmX5GM
Static task
static1
Behavioral task
behavioral1
Sample
32bf2d466325ca12c5e94dd27d695c3d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32bf2d466325ca12c5e94dd27d695c3d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
32bf2d466325ca12c5e94dd27d695c3d_JaffaCakes118
-
Size
496KB
-
MD5
32bf2d466325ca12c5e94dd27d695c3d
-
SHA1
3aa3dedaa3d63e800cd453e099e223ccd5660ddc
-
SHA256
4a93f6ff37174af5e5f36d3ce8f0ba0ebf77f4ace0a1b5187452435044bbbad7
-
SHA512
3ce90c98b59cc72a4ef9080b47b57aac4675f1fad546d1cc9b838f687216b815f2ad59a3c1b4d235e954726d5652fd9d797037d4e4ee8e2b524609dd8eea9ba5
-
SSDEEP
12288:RWI2OzYJD8eZ3WH/4F3Z4mxxgoEtlK+kt9T2MF:RaOMJjAHgQmX5GM
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-