Behavioral task
behavioral1
Sample
857e5d318d21ca8c545ce8161a424dcf_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
857e5d318d21ca8c545ce8161a424dcf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
857e5d318d21ca8c545ce8161a424dcf_JaffaCakes118
-
Size
92KB
-
MD5
857e5d318d21ca8c545ce8161a424dcf
-
SHA1
4f80bff0d470d912932a60fa1f5dabcdf650086e
-
SHA256
1d050bc32a9bef22261e1541d5edf0c41b54ce58770be383eacca6d81b3ffec2
-
SHA512
05c89c7b65db92471bfb5ea75ca5bfc2f08d6448ecb3697dd0df1de1f06cae5fbe24c50e7680ede567a3ab96981494cc75b2ff1e72d41f7a0227e7f46a12f6d4
-
SSDEEP
768:rpssQk55EO6PooOv6oU9ANgk/0Q+Vlxf9+b:rDQP06ousgnQ+k
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 857e5d318d21ca8c545ce8161a424dcf_JaffaCakes118
Files
-
857e5d318d21ca8c545ce8161a424dcf_JaffaCakes118.exe .vbs windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 60KB - Virtual size: 60KB