General
-
Target
e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118
-
Size
287KB
-
Sample
240915-1eezfatcjf
-
MD5
e3664ebb55203a64ce653e9e24f42c94
-
SHA1
c114ecdecf28ce2dda58ee91f7991713b23d9bf6
-
SHA256
843204454b03cdb889c6fe9f5138c6839bbb437790ded86297e4a430cd2db626
-
SHA512
0421298e16b56309561c816025b77e4490c3a86455081b7e4742e0ad383d9582ede36d233720719ff26cd5811f78cf68ed9ca8d75746d29bee95d10916555e5a
-
SSDEEP
6144:HlXqOPWOg9YylMQlHtvVrdP4ss0mMlr6RCG4ugjd6plt0:Hl6OaYylVNtvP4f0ACTuWIK
Static task
static1
Behavioral task
behavioral1
Sample
e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118
-
Size
287KB
-
MD5
e3664ebb55203a64ce653e9e24f42c94
-
SHA1
c114ecdecf28ce2dda58ee91f7991713b23d9bf6
-
SHA256
843204454b03cdb889c6fe9f5138c6839bbb437790ded86297e4a430cd2db626
-
SHA512
0421298e16b56309561c816025b77e4490c3a86455081b7e4742e0ad383d9582ede36d233720719ff26cd5811f78cf68ed9ca8d75746d29bee95d10916555e5a
-
SSDEEP
6144:HlXqOPWOg9YylMQlHtvVrdP4ss0mMlr6RCG4ugjd6plt0:Hl6OaYylVNtvP4f0ACTuWIK
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-