General
-
Target
b5e91a4a80d1f1edc413edb6a9f2582d_JaffaCakes118
-
Size
24KB
-
Sample
241202-avh3xsvndk
-
MD5
b5e91a4a80d1f1edc413edb6a9f2582d
-
SHA1
16b84ff649eadf6b77e1f514360914a25247c3a0
-
SHA256
0222cef05c94f0718699a62d75dfc4c22b5613118a2b7c5b7971d5c963f19c8d
-
SHA512
59ceca2c73c9ca96b26387ddecfdeab8fa817406dff6338daafac5cd66e178c5fff7803cac87c4489e52dacb2976d2a7adb8de0ad7e9c3055cf6cabd7309706c
-
SSDEEP
384:S3pJzu/RQ+mLyvXYu5+z0eicPiE6rmzKMrhY9RQeJN9pSJSC9KS:aupC2/kHPwr4sRV/SJB
Static task
static1
Behavioral task
behavioral1
Sample
b5e91a4a80d1f1edc413edb6a9f2582d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b5e91a4a80d1f1edc413edb6a9f2582d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
b5e91a4a80d1f1edc413edb6a9f2582d_JaffaCakes118
-
Size
24KB
-
MD5
b5e91a4a80d1f1edc413edb6a9f2582d
-
SHA1
16b84ff649eadf6b77e1f514360914a25247c3a0
-
SHA256
0222cef05c94f0718699a62d75dfc4c22b5613118a2b7c5b7971d5c963f19c8d
-
SHA512
59ceca2c73c9ca96b26387ddecfdeab8fa817406dff6338daafac5cd66e178c5fff7803cac87c4489e52dacb2976d2a7adb8de0ad7e9c3055cf6cabd7309706c
-
SSDEEP
384:S3pJzu/RQ+mLyvXYu5+z0eicPiE6rmzKMrhY9RQeJN9pSJSC9KS:aupC2/kHPwr4sRV/SJB
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Executes dropped EXE
-
Loads dropped DLL
-