General
-
Target
47833f4bc861e2fbe0938bebd17cbdc7_JaffaCakes118
-
Size
291KB
-
Sample
240715-a6rt7szgjk
-
MD5
47833f4bc861e2fbe0938bebd17cbdc7
-
SHA1
299c8277d89de826963f549aac54a6c31b73d220
-
SHA256
3f1342a87f83c6f55743d1e789ba16311d63a1bc2799f6a3b87f587b6173b5cc
-
SHA512
fcadda968543969e205925037b5d20109a72f7f8aafb1539a87c742ba59cc849a53224ac3ea5ceed0febe758bed3d31a5842945e6669f1cea67b75140c163070
-
SSDEEP
6144:PE0Vm/Wtq8qKOPvNxGCLIfWKdB6VzoMDD1HyeqftHJboIkRDMCjC:bVdXQvNxLY/dB2DUeqlpcIka
Static task
static1
Behavioral task
behavioral1
Sample
47833f4bc861e2fbe0938bebd17cbdc7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47833f4bc861e2fbe0938bebd17cbdc7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
47833f4bc861e2fbe0938bebd17cbdc7_JaffaCakes118
-
Size
291KB
-
MD5
47833f4bc861e2fbe0938bebd17cbdc7
-
SHA1
299c8277d89de826963f549aac54a6c31b73d220
-
SHA256
3f1342a87f83c6f55743d1e789ba16311d63a1bc2799f6a3b87f587b6173b5cc
-
SHA512
fcadda968543969e205925037b5d20109a72f7f8aafb1539a87c742ba59cc849a53224ac3ea5ceed0febe758bed3d31a5842945e6669f1cea67b75140c163070
-
SSDEEP
6144:PE0Vm/Wtq8qKOPvNxGCLIfWKdB6VzoMDD1HyeqftHJboIkRDMCjC:bVdXQvNxLY/dB2DUeqlpcIka
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-