Analysis
-
max time kernel
141s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
17-09-2024 17:15
Behavioral task
behavioral1
Sample
e751510b366843cbdacea6d119ac722d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e751510b366843cbdacea6d119ac722d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e751510b366843cbdacea6d119ac722d_JaffaCakes118.exe
-
Size
86KB
-
MD5
e751510b366843cbdacea6d119ac722d
-
SHA1
dd2a22ae192dcc15e1979f311e92b1a12fb4b25b
-
SHA256
127e8fc2f0032ec1c1d4438e09a34c36705773ac3b969784ee1ab3282c1eb789
-
SHA512
99c4d7f0a261cea1d8e47255418390e92cc3a1477409fe4737c46632b05deddad6e462de0da1bc06b1673eb14555a0bbf26c26c5a4c46100ea69aadb7f8e4dd5
-
SSDEEP
1536:quq/PuQuvlJWhdpa9E4Tm/dPJ8kuGLmYOpCdQ6/7Z:cPuHvwsEYm/dh8ALmYvdQ6j
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 14 IoCs
resource yara_rule behavioral1/memory/3052-0-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-1-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-2-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-3-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-4-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-5-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-6-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-7-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-8-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-9-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-10-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-11-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-12-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/3052-13-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2