Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
29/03/2025, 19:49
General
-
Target
JaffaCakes118_95ef3d003ae7f608f30eb8c9f1d765e5.exe
-
Size
43KB
-
MD5
95ef3d003ae7f608f30eb8c9f1d765e5
-
SHA1
af1f2f8dede8ba12b3cb7967ee934ca69c3a06cd
-
SHA256
9a701fff079995fa72ff6b2db7815bf14ea4de373dba0f3c66909a43fb65c911
-
SHA512
046cf5e694b529ab2d50c05f57cd9a9204d9a1c9eef9700ca2fb9074daf10defb759141c2f0810c8f8485b47ccbfeb5a7a175b48a08a8d309264814fa87d1e8a
-
SSDEEP
768:yvVElnMvr0kTCNMm3Deg06m4cb5WOvi4oUw46c538HbP1MTp8WiUQS3+vx2ha5rF:yvVEJjMm3Deg9AQ4w46c538HbPW+vUQ5
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage 2 IoCs
-
Loads dropped DLL 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_95ef3d003ae7f608f30eb8c9f1d765e5.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_95ef3d003ae7f608f30eb8c9f1d765e5.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD55ea28173d838d4e47b6742c35ba82bea
SHA1a7f55100bfb398b196b8d93075e4fc199a74f754
SHA2562422b83811f2ca793cf606a443156ce56050da3044d86d29c258013bc946bce9
SHA5129fa90ed5e494cad587505e6147f6aebf00ee55cfdffa5e99edbcf00ab582745b6774930575605664dde638099b5939c4e2d89ce6d28e22d163118f187fa499d7
-
Filesize
116KB