General
-
Target
bc523356aca1d8a1a4208d2ac391224c_JaffaCakes118
-
Size
613KB
-
Sample
241203-jaaeqavqbx
-
MD5
bc523356aca1d8a1a4208d2ac391224c
-
SHA1
71b01c5fb63d809acab5f84db83e012b67ce962d
-
SHA256
cde2bf2fc0a9e788e806993622e86e623a440765d0825c169efdd453fdecbb53
-
SHA512
cd2866424e513ea706faead9b9a866c766b530071ed14ae83d8b4e22532fb5660594fa50718015c6e940f03bc45c21c7d546781a833c63db9a0a61cc2f0ced97
-
SSDEEP
12288:rwQIrjMh9yLg5xm79ZB2wPTrF3Z4mxx38OENTvY4ocq:fI+8gyPTrQmX38OcvYv
Static task
static1
Behavioral task
behavioral1
Sample
bc523356aca1d8a1a4208d2ac391224c_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
bc523356aca1d8a1a4208d2ac391224c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
bc523356aca1d8a1a4208d2ac391224c_JaffaCakes118
-
Size
613KB
-
MD5
bc523356aca1d8a1a4208d2ac391224c
-
SHA1
71b01c5fb63d809acab5f84db83e012b67ce962d
-
SHA256
cde2bf2fc0a9e788e806993622e86e623a440765d0825c169efdd453fdecbb53
-
SHA512
cd2866424e513ea706faead9b9a866c766b530071ed14ae83d8b4e22532fb5660594fa50718015c6e940f03bc45c21c7d546781a833c63db9a0a61cc2f0ced97
-
SSDEEP
12288:rwQIrjMh9yLg5xm79ZB2wPTrF3Z4mxx38OENTvY4ocq:fI+8gyPTrQmX38OcvYv
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-