Behavioral task
behavioral1
Sample
39691484f0a751f5fac8559daf78564b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39691484f0a751f5fac8559daf78564b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39691484f0a751f5fac8559daf78564b_JaffaCakes118
-
Size
660KB
-
MD5
39691484f0a751f5fac8559daf78564b
-
SHA1
4195405cad917e589eb8aa2a09861a4ec728c7ce
-
SHA256
9c3d7fcc62ea48a84629caa0d88c813ac1de8fa7261e333770405427a7963928
-
SHA512
1e8d1535120cf3cd16be6c5cf7cd85e2440570eafd79dac16c1a8690ac8f021a6292ac47aa4b42cbc0ead7db3901a2bc9d06a70081432d424d227924ade66d61
-
SSDEEP
6144:ZG377xS2Vp2CeiorXdwTBVVAD4ov153kpcCJJvHgv5:sr7xS2Vp6RwTxAnvsbJJvHgv
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39691484f0a751f5fac8559daf78564b_JaffaCakes118
Files
-
39691484f0a751f5fac8559daf78564b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 616KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE