General
-
Target
f70e5bbe31a3b953ba55fcb35ff454b1_JaffaCakes118
-
Size
597KB
-
Sample
240925-3bhbhawgmc
-
MD5
f70e5bbe31a3b953ba55fcb35ff454b1
-
SHA1
d34b37b91fbdb995e0507c7a461f690bd105015f
-
SHA256
42a8b011ea909e76e91b70c0af554a0a06e1c3b7dfd5805d27b25e76dabd7aff
-
SHA512
6e1bcc4601696743c88e4c150113284e81f1e561ed09edf4dc8b540750921bb063b7359ad91bfa788befda2cf475ff6cc12e6dda21ad93d04253b19e2826568f
-
SSDEEP
12288:3M8FUr8wREWlM9Dvg+21c2obY7TsGsEbgO3yg:30rhRzM9DvWoc3sGbbgKyg
Static task
static1
Behavioral task
behavioral1
Sample
f70e5bbe31a3b953ba55fcb35ff454b1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f70e5bbe31a3b953ba55fcb35ff454b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f70e5bbe31a3b953ba55fcb35ff454b1_JaffaCakes118
-
Size
597KB
-
MD5
f70e5bbe31a3b953ba55fcb35ff454b1
-
SHA1
d34b37b91fbdb995e0507c7a461f690bd105015f
-
SHA256
42a8b011ea909e76e91b70c0af554a0a06e1c3b7dfd5805d27b25e76dabd7aff
-
SHA512
6e1bcc4601696743c88e4c150113284e81f1e561ed09edf4dc8b540750921bb063b7359ad91bfa788befda2cf475ff6cc12e6dda21ad93d04253b19e2826568f
-
SSDEEP
12288:3M8FUr8wREWlM9Dvg+21c2obY7TsGsEbgO3yg:30rhRzM9DvWoc3sGbbgKyg
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-