General
-
Target
d11a1db6536abe63b09d731f54fcce9d_JaffaCakes118
-
Size
612KB
-
Sample
240907-fb13aavgnl
-
MD5
d11a1db6536abe63b09d731f54fcce9d
-
SHA1
2e1dbcd4234dbabac75a622cface6de0a5bccd1a
-
SHA256
c736655166d7785c18c8738da524d2da7f02882fe628a5b5a663717b173cbb16
-
SHA512
d18fefd5d9b8f2fbaa5167e70b450a07855a52e8c5afd177720e98e51c79652e32486470379b826b26806da4beb9890c066973745f8f2f62b5b6a849b1e5a926
-
SSDEEP
12288:8ARQXylI3Q5Z7mbSX9WtzNTgJRN03+tccfEbuwI/vYewu:8ASII3Q/mbSX9ETgjN0OtccfMuwIHX
Static task
static1
Behavioral task
behavioral1
Sample
d11a1db6536abe63b09d731f54fcce9d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d11a1db6536abe63b09d731f54fcce9d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d11a1db6536abe63b09d731f54fcce9d_JaffaCakes118
-
Size
612KB
-
MD5
d11a1db6536abe63b09d731f54fcce9d
-
SHA1
2e1dbcd4234dbabac75a622cface6de0a5bccd1a
-
SHA256
c736655166d7785c18c8738da524d2da7f02882fe628a5b5a663717b173cbb16
-
SHA512
d18fefd5d9b8f2fbaa5167e70b450a07855a52e8c5afd177720e98e51c79652e32486470379b826b26806da4beb9890c066973745f8f2f62b5b6a849b1e5a926
-
SSDEEP
12288:8ARQXylI3Q5Z7mbSX9WtzNTgJRN03+tccfEbuwI/vYewu:8ASII3Q/mbSX9ETgjN0OtccfMuwIHX
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-