General
-
Target
cf2e3cfd76ed31b01fa025dfb3f728c3_JaffaCakes118
-
Size
144KB
-
Sample
240906-k1r8wsxhpc
-
MD5
cf2e3cfd76ed31b01fa025dfb3f728c3
-
SHA1
b67e3742a7eaa740f6553e11105a4435115cdcdd
-
SHA256
0b52e422abf0d397809a72e5f235734b9ab03b66074476e8906ce8006f303b8e
-
SHA512
a3469787511a69e3ef2315f261b7e592465ac949ed65a9d6bd39d0aa2824cff4bbcf0c456cb2ddbca97ce1d5140f4872be44096311d283efee11b5a102c15dc8
-
SSDEEP
1536:PsCqYOQXNCe9E8SMJQquzz0GQa1ltjRH+uopc/EM1zGrKtOvQK:dOmNG8A3H1hqcCrKkIK
Behavioral task
behavioral1
Sample
cf2e3cfd76ed31b01fa025dfb3f728c3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf2e3cfd76ed31b01fa025dfb3f728c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
cf2e3cfd76ed31b01fa025dfb3f728c3_JaffaCakes118
-
Size
144KB
-
MD5
cf2e3cfd76ed31b01fa025dfb3f728c3
-
SHA1
b67e3742a7eaa740f6553e11105a4435115cdcdd
-
SHA256
0b52e422abf0d397809a72e5f235734b9ab03b66074476e8906ce8006f303b8e
-
SHA512
a3469787511a69e3ef2315f261b7e592465ac949ed65a9d6bd39d0aa2824cff4bbcf0c456cb2ddbca97ce1d5140f4872be44096311d283efee11b5a102c15dc8
-
SSDEEP
1536:PsCqYOQXNCe9E8SMJQquzz0GQa1ltjRH+uopc/EM1zGrKtOvQK:dOmNG8A3H1hqcCrKkIK
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-