General
-
Target
ff5e2863440153305ea8cab67fecb2be_JaffaCakes118
-
Size
594KB
-
Sample
240929-1hdksa1hkn
-
MD5
ff5e2863440153305ea8cab67fecb2be
-
SHA1
5179ac947392efd76acf66ca6e2349a394f23b0e
-
SHA256
dcce71d13f61f3c0dbf69e8a4a57de81d41277b585b057b4ed6e0cf49a4bb3da
-
SHA512
6c4211f91609ce1eb743b278e70a5b87b22861d0ee3c718bc1d8070df31b25b716668752cb83278f77004287aef1d2ff9adebced9a1ef62b78b861bf45075286
-
SSDEEP
12288:Hx0FzFNxTG9ppkAUzEFHquQHnF3Z4mxxj7sIcOa/Y91TVK9:Hx0P69+ERQHnQmXnsINwr9
Static task
static1
Behavioral task
behavioral1
Sample
ff5e2863440153305ea8cab67fecb2be_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ff5e2863440153305ea8cab67fecb2be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ff5e2863440153305ea8cab67fecb2be_JaffaCakes118
-
Size
594KB
-
MD5
ff5e2863440153305ea8cab67fecb2be
-
SHA1
5179ac947392efd76acf66ca6e2349a394f23b0e
-
SHA256
dcce71d13f61f3c0dbf69e8a4a57de81d41277b585b057b4ed6e0cf49a4bb3da
-
SHA512
6c4211f91609ce1eb743b278e70a5b87b22861d0ee3c718bc1d8070df31b25b716668752cb83278f77004287aef1d2ff9adebced9a1ef62b78b861bf45075286
-
SSDEEP
12288:Hx0FzFNxTG9ppkAUzEFHquQHnF3Z4mxxj7sIcOa/Y91TVK9:Hx0P69+ERQHnQmXnsINwr9
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Drops file in System32 directory
-