General
-
Target
df56132bc0e8ec82fc6aeb9e7cde5448_JaffaCakes118
-
Size
641KB
-
Sample
240914-c359jasepn
-
MD5
df56132bc0e8ec82fc6aeb9e7cde5448
-
SHA1
07b848ed9d3d6b7ae1665773a93dc54c2b2ce5c2
-
SHA256
a46db8b5f84724ed48fa71b55f001dd3bdce43a4e594e801209724d1a97403e7
-
SHA512
3fd49cc6fc2e96a80e6f328c5f71b3e393ba9b554003996859d316f1508a1e9b67acd92ade025e9c5f0aec0cca58a2fd1b16fac71f9933cd64a1219f267c986d
-
SSDEEP
12288:DAPdPPbmV4YNvDHIm/BQMW8SgY4vqHISVcpE8QPuxF19KkXPh8GJZ:DAFKxomZ08SgDvQISVcu8QPCDAkdD
Static task
static1
Behavioral task
behavioral1
Sample
df56132bc0e8ec82fc6aeb9e7cde5448_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df56132bc0e8ec82fc6aeb9e7cde5448_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
df56132bc0e8ec82fc6aeb9e7cde5448_JaffaCakes118
-
Size
641KB
-
MD5
df56132bc0e8ec82fc6aeb9e7cde5448
-
SHA1
07b848ed9d3d6b7ae1665773a93dc54c2b2ce5c2
-
SHA256
a46db8b5f84724ed48fa71b55f001dd3bdce43a4e594e801209724d1a97403e7
-
SHA512
3fd49cc6fc2e96a80e6f328c5f71b3e393ba9b554003996859d316f1508a1e9b67acd92ade025e9c5f0aec0cca58a2fd1b16fac71f9933cd64a1219f267c986d
-
SSDEEP
12288:DAPdPPbmV4YNvDHIm/BQMW8SgY4vqHISVcpE8QPuxF19KkXPh8GJZ:DAFKxomZ08SgDvQISVcu8QPCDAkdD
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-