General
-
Target
e58f40db825b4db9143bbe37d3d719e7_JaffaCakes118
-
Size
544KB
-
Sample
240916-zsfx8azanp
-
MD5
e58f40db825b4db9143bbe37d3d719e7
-
SHA1
254fb58c6a04f152bc852c16c89f4b357789965e
-
SHA256
18158160ad70f154ce72cccc19ebf4d791b66206db81e915bd53f4cfa724ce7f
-
SHA512
4791634192d5fddfd79c5c74c83cab45cb940f8186f24761114966f224514d7739f077134b208b3cce4760aba9a9f8108a13bb3de70e27fc09ecdfce57604acf
-
SSDEEP
12288:f8sFz3pC+ZF3Z4mxxFCknbPHZzOS9kRf2+lf:f9hZtQmXlbxOS9Cf2I
Static task
static1
Behavioral task
behavioral1
Sample
e58f40db825b4db9143bbe37d3d719e7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e58f40db825b4db9143bbe37d3d719e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e58f40db825b4db9143bbe37d3d719e7_JaffaCakes118
-
Size
544KB
-
MD5
e58f40db825b4db9143bbe37d3d719e7
-
SHA1
254fb58c6a04f152bc852c16c89f4b357789965e
-
SHA256
18158160ad70f154ce72cccc19ebf4d791b66206db81e915bd53f4cfa724ce7f
-
SHA512
4791634192d5fddfd79c5c74c83cab45cb940f8186f24761114966f224514d7739f077134b208b3cce4760aba9a9f8108a13bb3de70e27fc09ecdfce57604acf
-
SSDEEP
12288:f8sFz3pC+ZF3Z4mxxFCknbPHZzOS9kRf2+lf:f9hZtQmXlbxOS9Cf2I
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-