General
-
Target
d766b8473d165c0f56d0f62d28509cd7_JaffaCakes118
-
Size
587KB
-
Sample
240910-br5yys1hpg
-
MD5
d766b8473d165c0f56d0f62d28509cd7
-
SHA1
2b066721df7d2e969d0713cfeef212e181d295fe
-
SHA256
c117ed84940a1e3c5423d593451703c1966edada7b15050ba6da40f26ce1d815
-
SHA512
308bbdae60edbe4de97cfdf1a4e06dfb86c8b505084f1df8051450b59d1b0a407e876ea329e7e0798d4fd26cbc4ba0673ed4dc3ba63cada305c9efb87c5e014a
-
SSDEEP
12288:Ci5TKwkZSULvnTLcyF3Z4mxxJDqVTVOCuE:CqeB4gtQmXgVTzuE
Static task
static1
Behavioral task
behavioral1
Sample
d766b8473d165c0f56d0f62d28509cd7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d766b8473d165c0f56d0f62d28509cd7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d766b8473d165c0f56d0f62d28509cd7_JaffaCakes118
-
Size
587KB
-
MD5
d766b8473d165c0f56d0f62d28509cd7
-
SHA1
2b066721df7d2e969d0713cfeef212e181d295fe
-
SHA256
c117ed84940a1e3c5423d593451703c1966edada7b15050ba6da40f26ce1d815
-
SHA512
308bbdae60edbe4de97cfdf1a4e06dfb86c8b505084f1df8051450b59d1b0a407e876ea329e7e0798d4fd26cbc4ba0673ed4dc3ba63cada305c9efb87c5e014a
-
SSDEEP
12288:Ci5TKwkZSULvnTLcyF3Z4mxxJDqVTVOCuE:CqeB4gtQmXgVTzuE
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-