Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03/11/2024, 19:04
Static task
static1
Behavioral task
behavioral1
Sample
8d077427f90432668b594fb5db71a230_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8d077427f90432668b594fb5db71a230_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8d077427f90432668b594fb5db71a230_JaffaCakes118.exe
-
Size
588KB
-
MD5
8d077427f90432668b594fb5db71a230
-
SHA1
a6db2ca9bb241fb33ae03a5528be269d23e438a6
-
SHA256
05aff25de251b19cb35094b144b26c6aa3f67f5d574409290e34a3f011960654
-
SHA512
f54dfdcf937ddde8a069995e97335dbfc145c8a292b3f7a14d8a9989aefa6b6d81d06798497b70d4f107260f2a81751110be99242c3f289aa202f330565ca21c
-
SSDEEP
12288:YS+d7GNVUwxo7z/4FHJbkRekmF3Z4mxxb0MHoTAFbphQV:CyjU0oEx1QmXbKp
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 1 IoCs
resource yara_rule behavioral1/memory/1984-32-0x0000000013140000-0x0000000013224000-memory.dmp modiloader_stage2