General
-
Target
d026155718489bb08b6b9ac4f85fe6c8_JaffaCakes118
-
Size
16.1MB
-
Sample
240405-lnlq1sgf6w
-
MD5
d026155718489bb08b6b9ac4f85fe6c8
-
SHA1
273a27923b7a37ab76d222b90d18fbc1d7bcb8bb
-
SHA256
3788e339a81ae2928be721d261414645c75e4c9b9e19f4dbd8d99b561c596ad7
-
SHA512
0db8884ec7f0032ee91efddf1046a1f52f882584ddf4d66b26803a9263cf4fcfa3169ad125e19d863263d78b23bfca33358fb034a21b8263e27b7bf3a6a6ae9d
-
SSDEEP
393216:98ud5zVorDlZqcPlwwlIdfrR0RILPHgfACLx2bd1npcg1:98uPV8bzGJxLYfA02bP
Static task
static1
Behavioral task
behavioral1
Sample
d026155718489bb08b6b9ac4f85fe6c8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d026155718489bb08b6b9ac4f85fe6c8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
d026155718489bb08b6b9ac4f85fe6c8_JaffaCakes118
-
Size
16.1MB
-
MD5
d026155718489bb08b6b9ac4f85fe6c8
-
SHA1
273a27923b7a37ab76d222b90d18fbc1d7bcb8bb
-
SHA256
3788e339a81ae2928be721d261414645c75e4c9b9e19f4dbd8d99b561c596ad7
-
SHA512
0db8884ec7f0032ee91efddf1046a1f52f882584ddf4d66b26803a9263cf4fcfa3169ad125e19d863263d78b23bfca33358fb034a21b8263e27b7bf3a6a6ae9d
-
SSDEEP
393216:98ud5zVorDlZqcPlwwlIdfrR0RILPHgfACLx2bd1npcg1:98uPV8bzGJxLYfA02bP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-