Behavioral task
behavioral1
Sample
JaffaCakes118_6c24ebaa1c4f9d93e80af4627610d040.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6c24ebaa1c4f9d93e80af4627610d040.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6c24ebaa1c4f9d93e80af4627610d040
-
Size
678KB
-
MD5
6c24ebaa1c4f9d93e80af4627610d040
-
SHA1
77c097197392b4e4c95cf8023864c32ecceb97bc
-
SHA256
a90953be4ab427a2d17c3bb7deec68ff0d42f91f1c79fe96da26b49c66d3f1fc
-
SHA512
1763fa38c2d4024b194f52238eb36839acd26ad195a61754d3e8e4e7a187d781e74f8747a1f0690d9810883db69f9d0832781df641f09b05c6ed351a4324b6a9
-
SSDEEP
12288:ItzSoEDsJ/kvRID/xtimRzOINFrGTcmQiJF5TxT/Hv8:MmmJ/k5Kx0cOICwCFBxTPE
Malware Config
Signatures
-
ModiLoader Second Stage 1 IoCs
resource yara_rule sample modiloader_stage2 -
Modiloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6c24ebaa1c4f9d93e80af4627610d040
Files
-
JaffaCakes118_6c24ebaa1c4f9d93e80af4627610d040.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
����� Size: - Virtual size: 4088.5MB
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size: