General
-
Target
ec784e4049fcf58bfc91a1e7be271146_JaffaCakes118
-
Size
670KB
-
Sample
240920-amjpgsyeqc
-
MD5
ec784e4049fcf58bfc91a1e7be271146
-
SHA1
b5267e82cb511b6cad7dc65f0931ee315b80b49a
-
SHA256
0177a2d00514cf68b9136e435bf76c248387a21b2713873f0775d3c2c36cccab
-
SHA512
a480952b4dc5a7228eae4bd9e8e2dd35a2f45da0aa1a44e48e2777c0d4d02c05583abed5d55d237bea5001fe08861f72b0a332365e196c76fa293b34c262ec68
-
SSDEEP
12288:jabT0UdwF1Kx2AUckGFBsl8VUA27XPhaM2P5AdT4:WbgF1KEhckssGVrKhaM8AdT4
Behavioral task
behavioral1
Sample
ec784e4049fcf58bfc91a1e7be271146_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec784e4049fcf58bfc91a1e7be271146_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ec784e4049fcf58bfc91a1e7be271146_JaffaCakes118
-
Size
670KB
-
MD5
ec784e4049fcf58bfc91a1e7be271146
-
SHA1
b5267e82cb511b6cad7dc65f0931ee315b80b49a
-
SHA256
0177a2d00514cf68b9136e435bf76c248387a21b2713873f0775d3c2c36cccab
-
SHA512
a480952b4dc5a7228eae4bd9e8e2dd35a2f45da0aa1a44e48e2777c0d4d02c05583abed5d55d237bea5001fe08861f72b0a332365e196c76fa293b34c262ec68
-
SSDEEP
12288:jabT0UdwF1Kx2AUckGFBsl8VUA27XPhaM2P5AdT4:WbgF1KEhckssGVrKhaM8AdT4
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-