General
-
Target
e57ffc0b3f39cb07f9e2e0e7069eaba2_JaffaCakes118
-
Size
536KB
-
Sample
240407-wbm4esad83
-
MD5
e57ffc0b3f39cb07f9e2e0e7069eaba2
-
SHA1
02229eade78e4ee15b2c25c2f4fb1ad82cee32c8
-
SHA256
04d33f6a986266cd84e4a2dc479fddaee035d139b0773eb3be36ff2740b781e5
-
SHA512
be4dda7360d70b4be9e7b855110fcd264467b0de46ac30b3b0db4036369c44fabf1fd088aadc3228bc84669e0d316c5a528387dc09a9b5f4ba59f6ccf39ae710
-
SSDEEP
12288:5stKi/CYqICxr0BnVIPm1/rF/UhoNieeAssK7slRJmF3wF:GKi/CXICx0+m1B/eoNiees
Static task
static1
Behavioral task
behavioral1
Sample
e57ffc0b3f39cb07f9e2e0e7069eaba2_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e57ffc0b3f39cb07f9e2e0e7069eaba2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e57ffc0b3f39cb07f9e2e0e7069eaba2_JaffaCakes118
-
Size
536KB
-
MD5
e57ffc0b3f39cb07f9e2e0e7069eaba2
-
SHA1
02229eade78e4ee15b2c25c2f4fb1ad82cee32c8
-
SHA256
04d33f6a986266cd84e4a2dc479fddaee035d139b0773eb3be36ff2740b781e5
-
SHA512
be4dda7360d70b4be9e7b855110fcd264467b0de46ac30b3b0db4036369c44fabf1fd088aadc3228bc84669e0d316c5a528387dc09a9b5f4ba59f6ccf39ae710
-
SSDEEP
12288:5stKi/CYqICxr0BnVIPm1/rF/UhoNieeAssK7slRJmF3wF:GKi/CXICx0+m1B/eoNiees
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-