Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
26-11-2024 03:36
Behavioral task
behavioral1
Sample
9f9b6422120c3335fb8cd24a217876de_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9f9b6422120c3335fb8cd24a217876de_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
9f9b6422120c3335fb8cd24a217876de_JaffaCakes118.exe
-
Size
651KB
-
MD5
9f9b6422120c3335fb8cd24a217876de
-
SHA1
3c624481e86ef2e0e16d3d2b0d4c3c3dabd53e07
-
SHA256
d6847cb6c84b456f73e7fd76e0538f34ef0e5c0259f65bdec5bedd21ccfacc12
-
SHA512
e0301d5fe8a9fef4973c69366878858d20d5c162fe481a4bd724affd37edd3e92079926509ba27f6d430fa0ed56ff3f9fd4006773d5255b8b32c8382b86e225a
-
SSDEEP
12288:kpyZT1rrCxu/mDwLRI6BxcDqp9aqCcajVuD3Z7BPQGMWYur0s0D:kUx1rjOD3SxcDDcNDqWYurL0
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 14 IoCs
Processes:
resource yara_rule behavioral1/memory/2432-0-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-1-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-2-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-3-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-4-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-5-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-6-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-7-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-8-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-9-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-10-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-11-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-12-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2 behavioral1/memory/2432-13-0x0000000000400000-0x000000000041C000-memory.dmp modiloader_stage2