General
-
Target
dbeca26bcb5444bbe2692893e9a64c39_JaffaCakes118
-
Size
585KB
-
Sample
240912-gh7zvatgrd
-
MD5
dbeca26bcb5444bbe2692893e9a64c39
-
SHA1
126f10c8a68a5735fba97c859552bb2af76b0160
-
SHA256
a194ff906b8385771fe6de68546e76c38d4e0c8808f191d35a797b69931a0b8a
-
SHA512
1091e7a41df63aa7143ecbd8fd3dc6d44443640532e1504596085147af07e6eba7f16bb2e1af7b063d314330551904df0989c7ad417262edd705966ba5e8c2c2
-
SSDEEP
12288:XCPykYTNuzMhP4DQJ6Yu2xmNEg8F3Z4mxxADqVTVOCF:XCPiTNhhw8JnutE5QmXXVTzF
Static task
static1
Behavioral task
behavioral1
Sample
dbeca26bcb5444bbe2692893e9a64c39_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbeca26bcb5444bbe2692893e9a64c39_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
dbeca26bcb5444bbe2692893e9a64c39_JaffaCakes118
-
Size
585KB
-
MD5
dbeca26bcb5444bbe2692893e9a64c39
-
SHA1
126f10c8a68a5735fba97c859552bb2af76b0160
-
SHA256
a194ff906b8385771fe6de68546e76c38d4e0c8808f191d35a797b69931a0b8a
-
SHA512
1091e7a41df63aa7143ecbd8fd3dc6d44443640532e1504596085147af07e6eba7f16bb2e1af7b063d314330551904df0989c7ad417262edd705966ba5e8c2c2
-
SSDEEP
12288:XCPykYTNuzMhP4DQJ6Yu2xmNEg8F3Z4mxxADqVTVOCF:XCPiTNhhw8JnutE5QmXXVTzF
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-