General
-
Target
d887fc8cfdf54ff1caa776db83058f01_JaffaCakes118
-
Size
300KB
-
Sample
240910-tb1y6sshmc
-
MD5
d887fc8cfdf54ff1caa776db83058f01
-
SHA1
fe414511e57290f60743bd0cc89afe6b513ed100
-
SHA256
c45b81fc0d6abfd3c4004244d169c29600635c835d5a941e152944c95d95a6ce
-
SHA512
afef9c459d52cde35d876d4fe6456e4e9b87b57475d49b6d6a371772a0740000360e09753dc657c40817345eb91cbce27c072fbf29638da4e8d3a5da4db84f02
-
SSDEEP
6144:40C8saWj8UKXXgHGT8BLEINpbsf5LmW2Ibcis09qW9qtYbBw:nCCWjtKXoGTYhU5L0I4ibG2dw
Static task
static1
Behavioral task
behavioral1
Sample
d887fc8cfdf54ff1caa776db83058f01_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d887fc8cfdf54ff1caa776db83058f01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d887fc8cfdf54ff1caa776db83058f01_JaffaCakes118
-
Size
300KB
-
MD5
d887fc8cfdf54ff1caa776db83058f01
-
SHA1
fe414511e57290f60743bd0cc89afe6b513ed100
-
SHA256
c45b81fc0d6abfd3c4004244d169c29600635c835d5a941e152944c95d95a6ce
-
SHA512
afef9c459d52cde35d876d4fe6456e4e9b87b57475d49b6d6a371772a0740000360e09753dc657c40817345eb91cbce27c072fbf29638da4e8d3a5da4db84f02
-
SSDEEP
6144:40C8saWj8UKXXgHGT8BLEINpbsf5LmW2Ibcis09qW9qtYbBw:nCCWjtKXoGTYhU5L0I4ibG2dw
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-