General
-
Target
ea25dbbd297ab0e8875e0065a4ed4cbc_JaffaCakes118
-
Size
33KB
-
Sample
240409-raqeyacb8z
-
MD5
ea25dbbd297ab0e8875e0065a4ed4cbc
-
SHA1
054dff6a3273fa89ce5e2282cc190c114bd487f3
-
SHA256
e4dad2be2a4ce5a2766a15dd0a68429a934bfba21ced0764f9fa3b77e9ee012b
-
SHA512
dd27e12a4ffb883ec22fa071ab81426176565c62492b606a4929fcadf8f62b645d6059a4696d1d00f802089e7a640e297645307c5076ea0137ba27d3f46ce3b3
-
SSDEEP
384:uG3uM7DuzE/10B6OFMYGbEkn2y/UJZQo5TLxBuMmZ/5SGxdwVyGzkL0i:GLIROmYGbR2osJLqhSGx0rze0i
Static task
static1
Behavioral task
behavioral1
Sample
ea25dbbd297ab0e8875e0065a4ed4cbc_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ea25dbbd297ab0e8875e0065a4ed4cbc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ea25dbbd297ab0e8875e0065a4ed4cbc_JaffaCakes118
-
Size
33KB
-
MD5
ea25dbbd297ab0e8875e0065a4ed4cbc
-
SHA1
054dff6a3273fa89ce5e2282cc190c114bd487f3
-
SHA256
e4dad2be2a4ce5a2766a15dd0a68429a934bfba21ced0764f9fa3b77e9ee012b
-
SHA512
dd27e12a4ffb883ec22fa071ab81426176565c62492b606a4929fcadf8f62b645d6059a4696d1d00f802089e7a640e297645307c5076ea0137ba27d3f46ce3b3
-
SSDEEP
384:uG3uM7DuzE/10B6OFMYGbEkn2y/UJZQo5TLxBuMmZ/5SGxdwVyGzkL0i:GLIROmYGbR2osJLqhSGx0rze0i
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-