General
-
Target
e0b99d316530f3345d1017306dca9ad6_JaffaCakes118
-
Size
678KB
-
Sample
240914-wkhkasxbqn
-
MD5
e0b99d316530f3345d1017306dca9ad6
-
SHA1
4dd6b4ed25f8ecbb55033f47886fb5d3c30a7717
-
SHA256
1689b1cf2eb49c2ca4588505b1455d77a7f50c99c85622687485772663635488
-
SHA512
2b7025595c8a1791ec7becdca6d5d5231df5bf4de74b4690c5638310ce68aedd581eb810d564777a913745e57df57017b40e8cc2cddb06df898e62bb566b0933
-
SSDEEP
12288:3sWdVgX1MwKcjZ+fEEIjEOyk/AXqUSJvA4fQfcW39ot6iyXavT22T:3zg6wKcV+sECkXOh4Hu6iNvTZT
Behavioral task
behavioral1
Sample
e0b99d316530f3345d1017306dca9ad6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e0b99d316530f3345d1017306dca9ad6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e0b99d316530f3345d1017306dca9ad6_JaffaCakes118
-
Size
678KB
-
MD5
e0b99d316530f3345d1017306dca9ad6
-
SHA1
4dd6b4ed25f8ecbb55033f47886fb5d3c30a7717
-
SHA256
1689b1cf2eb49c2ca4588505b1455d77a7f50c99c85622687485772663635488
-
SHA512
2b7025595c8a1791ec7becdca6d5d5231df5bf4de74b4690c5638310ce68aedd581eb810d564777a913745e57df57017b40e8cc2cddb06df898e62bb566b0933
-
SSDEEP
12288:3sWdVgX1MwKcjZ+fEEIjEOyk/AXqUSJvA4fQfcW39ot6iyXavT22T:3zg6wKcV+sECkXOh4Hu6iNvTZT
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-