Extracted

• • Target

    bfb377f211eb03329b6193b45132da50_JaffaCakes118

  • Size

    108KB

  • MD5

    bfb377f211eb03329b6193b45132da50

  • SHA1

    6b39fc8fc437dd131e024c60fab2f5173686c042

  • SHA256

    b8b1c9d858522433224e13916783ae7b974e1ff97868dd3864b9810e451cd96a

  • SHA512

    40088f8b4d7b2c4dc2f882dad771ff360cc5696a39247a33a70b6227cbe1bf75dd22801f4df134facf90f8a5fd3df7de9ea9366a8b744bb9b0d367c61c9d2bd0

  • SSDEEP

    1536:MVuNAXTj4Fj/91/NnLZqeWEPVpa8DzePjkgcwYS7S5+Vfk09+2y7J4nouy8:aoy8j7VnNdrPHaSekwi+mW+2y7Jwout

  Score

  10^/10

  latentbotmodiloaderdiscoveryevasiontrojanupx

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Latentbot family

    latentbot

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • Modiloader family

    modiloader

  • UAC bypass

    evasiontrojan

  • ModiLoader Second Stage

  • Loads dropped DLL

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2