General
-
Target
e22ee7151c2cebbeb5f0b48097ab49bd_JaffaCakes118
-
Size
683KB
-
Sample
240915-lkvvhsxepr
-
MD5
e22ee7151c2cebbeb5f0b48097ab49bd
-
SHA1
5a3ea5db572b965729d7ea62576369b314bd4e98
-
SHA256
f00e2fddaa320e0a37f6b817cea9189bce85acd96c4c20dbd11c2c795ef8011f
-
SHA512
32e2f1d4d0b601e328d461c5f28df2a273b7988af8aff484fe93c4381fd91cf44fb984f2737de10b610ff431371d1e814d79aacf52077f0fdc74a067c305e04a
-
SSDEEP
12288:tsWdVgX1MwKcjZ+fEEIjEOyk/AXqUhKfa4fQfcW39o+esvT+:Nzg6wKcV+sECkXuD4HVesvT
Behavioral task
behavioral1
Sample
e22ee7151c2cebbeb5f0b48097ab49bd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e22ee7151c2cebbeb5f0b48097ab49bd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e22ee7151c2cebbeb5f0b48097ab49bd_JaffaCakes118
-
Size
683KB
-
MD5
e22ee7151c2cebbeb5f0b48097ab49bd
-
SHA1
5a3ea5db572b965729d7ea62576369b314bd4e98
-
SHA256
f00e2fddaa320e0a37f6b817cea9189bce85acd96c4c20dbd11c2c795ef8011f
-
SHA512
32e2f1d4d0b601e328d461c5f28df2a273b7988af8aff484fe93c4381fd91cf44fb984f2737de10b610ff431371d1e814d79aacf52077f0fdc74a067c305e04a
-
SSDEEP
12288:tsWdVgX1MwKcjZ+fEEIjEOyk/AXqUhKfa4fQfcW39o+esvT+:Nzg6wKcV+sECkXuD4HVesvT
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-