General
-
Target
e79185fd59775607c4ffd8e45743d38f_JaffaCakes118
-
Size
275KB
-
Sample
240917-ydqy7s1epj
-
MD5
e79185fd59775607c4ffd8e45743d38f
-
SHA1
5bb6590f19d464ec4718ff7948a5f25f486997d6
-
SHA256
93f92dfa3bc2cd8983c343838dd2e212ad9706274459d6176de596dcbbafb0f5
-
SHA512
bb48f1ac4ada386618fec95bea71ab156f071e352804860f9c13da7430caac1cb2b3e72e73351188cc2b71dff14227976fca6de759303c620cf1704ffa2ef808
-
SSDEEP
6144:FV0FJQSCAmEzAD0ev91NIpbVxBjZOI9lL5EpbMuR1nFYDNj7iMoK:AFJQSCA/Q0m9SHrd9pK1HRfY4MJ
Static task
static1
Behavioral task
behavioral1
Sample
e79185fd59775607c4ffd8e45743d38f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e79185fd59775607c4ffd8e45743d38f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e79185fd59775607c4ffd8e45743d38f_JaffaCakes118
-
Size
275KB
-
MD5
e79185fd59775607c4ffd8e45743d38f
-
SHA1
5bb6590f19d464ec4718ff7948a5f25f486997d6
-
SHA256
93f92dfa3bc2cd8983c343838dd2e212ad9706274459d6176de596dcbbafb0f5
-
SHA512
bb48f1ac4ada386618fec95bea71ab156f071e352804860f9c13da7430caac1cb2b3e72e73351188cc2b71dff14227976fca6de759303c620cf1704ffa2ef808
-
SSDEEP
6144:FV0FJQSCAmEzAD0ev91NIpbVxBjZOI9lL5EpbMuR1nFYDNj7iMoK:AFJQSCA/Q0m9SHrd9pK1HRfY4MJ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-