General
-
Target
e0ac566b245f8cfb927cbe2681744c1d_JaffaCakes118
-
Size
665KB
-
Sample
240914-v2verawflh
-
MD5
e0ac566b245f8cfb927cbe2681744c1d
-
SHA1
e3858a1af595e29d65071e57196a23eb9eb6846b
-
SHA256
c831ff464aaa7ba85c86cf3a6e90428ce004637f226d0fd05253214eee37114f
-
SHA512
47d80d6557ee5d6bcf9e72f9a28f47fbbaf3bff43c930331ec4557ab2c149d60bd3f62922cd63237aaf9db4915ac6fbbee07c9e885f95c4a1d7860d3a777ebf0
-
SSDEEP
12288:LMUNmhVaz4oU+OKxUwg/oMSDVnnEKYdGSSzoAF3Z4mxxGJ9oZHMdoJGtQDWYS:IUNmnaz4hKqJQMKnExcoAQmXrpM2JMI4
Static task
static1
Behavioral task
behavioral1
Sample
e0ac566b245f8cfb927cbe2681744c1d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0ac566b245f8cfb927cbe2681744c1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e0ac566b245f8cfb927cbe2681744c1d_JaffaCakes118
-
Size
665KB
-
MD5
e0ac566b245f8cfb927cbe2681744c1d
-
SHA1
e3858a1af595e29d65071e57196a23eb9eb6846b
-
SHA256
c831ff464aaa7ba85c86cf3a6e90428ce004637f226d0fd05253214eee37114f
-
SHA512
47d80d6557ee5d6bcf9e72f9a28f47fbbaf3bff43c930331ec4557ab2c149d60bd3f62922cd63237aaf9db4915ac6fbbee07c9e885f95c4a1d7860d3a777ebf0
-
SSDEEP
12288:LMUNmhVaz4oU+OKxUwg/oMSDVnnEKYdGSSzoAF3Z4mxxGJ9oZHMdoJGtQDWYS:IUNmnaz4hKqJQMKnExcoAQmXrpM2JMI4
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-