General
-
Target
bed77ed5f377485bda54efcc6be69c03_JaffaCakes118
-
Size
428KB
-
Sample
241203-xzacxavmhj
-
MD5
bed77ed5f377485bda54efcc6be69c03
-
SHA1
8509d6aa6f22e47f9d059d428504d9396b9d9de4
-
SHA256
1830b03104e3540afb48a023716da62e540a77f370b39648b4bf1b5178397098
-
SHA512
e2624c7f24edc95391fe0eb3bb73568011ea365d1abf8de776f1695c2cdd4b079b84e9c747683e0ebfe8606d65e0ff0d50511df23372784c0599cbaf63b2c57c
-
SSDEEP
6144:trq/adF4j64iZaUvKB1IkRvrW5NgeYmi8cGFp8qLlpskKU17Bv++5JBhvNA8IerI:teadFRE1IkBI2YYvqLPL355NA8XbE
Static task
static1
Behavioral task
behavioral1
Sample
bed77ed5f377485bda54efcc6be69c03_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bed77ed5f377485bda54efcc6be69c03_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
bed77ed5f377485bda54efcc6be69c03_JaffaCakes118
-
Size
428KB
-
MD5
bed77ed5f377485bda54efcc6be69c03
-
SHA1
8509d6aa6f22e47f9d059d428504d9396b9d9de4
-
SHA256
1830b03104e3540afb48a023716da62e540a77f370b39648b4bf1b5178397098
-
SHA512
e2624c7f24edc95391fe0eb3bb73568011ea365d1abf8de776f1695c2cdd4b079b84e9c747683e0ebfe8606d65e0ff0d50511df23372784c0599cbaf63b2c57c
-
SSDEEP
6144:trq/adF4j64iZaUvKB1IkRvrW5NgeYmi8cGFp8qLlpskKU17Bv++5JBhvNA8IerI:teadFRE1IkBI2YYvqLPL355NA8XbE
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-