General
-
Target
f308a72a717d473e193dd157eec6b737_JaffaCakes118
-
Size
60KB
-
Sample
240924-hc8jvsxgrb
-
MD5
f308a72a717d473e193dd157eec6b737
-
SHA1
b57ff5bb993002b7cce0f5eec30d9ff92eaa0806
-
SHA256
89dad51cc879d6b0fbc015836e519183499c2d69a052fa87af7ae404a1208500
-
SHA512
aa76bb64a43d7a68e6a58813afba2455be448763d1be11036360b1457b872fa8190514e89e1d678a65853889c8e73d073854fa94c1ddc3858e3724d1e60ce1b6
-
SSDEEP
1536:Pbm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8ocdV71u:I+sVT45mn/bjni8DBebXNA8ou71u
Static task
static1
Behavioral task
behavioral1
Sample
f308a72a717d473e193dd157eec6b737_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f308a72a717d473e193dd157eec6b737_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f308a72a717d473e193dd157eec6b737_JaffaCakes118
-
Size
60KB
-
MD5
f308a72a717d473e193dd157eec6b737
-
SHA1
b57ff5bb993002b7cce0f5eec30d9ff92eaa0806
-
SHA256
89dad51cc879d6b0fbc015836e519183499c2d69a052fa87af7ae404a1208500
-
SHA512
aa76bb64a43d7a68e6a58813afba2455be448763d1be11036360b1457b872fa8190514e89e1d678a65853889c8e73d073854fa94c1ddc3858e3724d1e60ce1b6
-
SSDEEP
1536:Pbm7wjsVTJ+p3JrkGLawHE/E2j+Ei+Hj2aBzybXNEH8ocdV71u:I+sVT45mn/bjni8DBebXNA8ou71u
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-