General
-
Target
e30e02b8bc9b65d29c6565bfbd44e6da_JaffaCakes118
-
Size
691KB
-
Sample
240915-wdlndawcjm
-
MD5
e30e02b8bc9b65d29c6565bfbd44e6da
-
SHA1
5c6bb6269958d7c7de592851fed35ee4f72a52a5
-
SHA256
0c683d02c045cc594f116a4eac2c58f0985823c432afa7275f29e5955c6ff5e5
-
SHA512
831f374df5e26d733a9d0df8509b8aa6f2b90b2b1e2df1f07e3e31493c90552c1acae5b51d894d8fdeaef68a4247f1ae8fdb55e6dd54a62456ee36a407a7291d
-
SSDEEP
12288:UGMz5TT+i9DRLo4jepFQHtew1g9Fnww/YBLLUGYD8+TPcN8:HI5n9DuHDAU9FnwF9m8+TPR
Behavioral task
behavioral1
Sample
e30e02b8bc9b65d29c6565bfbd44e6da_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e30e02b8bc9b65d29c6565bfbd44e6da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e30e02b8bc9b65d29c6565bfbd44e6da_JaffaCakes118
-
Size
691KB
-
MD5
e30e02b8bc9b65d29c6565bfbd44e6da
-
SHA1
5c6bb6269958d7c7de592851fed35ee4f72a52a5
-
SHA256
0c683d02c045cc594f116a4eac2c58f0985823c432afa7275f29e5955c6ff5e5
-
SHA512
831f374df5e26d733a9d0df8509b8aa6f2b90b2b1e2df1f07e3e31493c90552c1acae5b51d894d8fdeaef68a4247f1ae8fdb55e6dd54a62456ee36a407a7291d
-
SSDEEP
12288:UGMz5TT+i9DRLo4jepFQHtew1g9Fnww/YBLLUGYD8+TPcN8:HI5n9DuHDAU9FnwF9m8+TPR
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-