General
-
Target
f45e5a09535db4501c895ca74bbc5b8c_JaffaCakes118
-
Size
808KB
-
Sample
240416-1c4j1sef9z
-
MD5
f45e5a09535db4501c895ca74bbc5b8c
-
SHA1
51dcc9d90c2ef023f83f9f929ab9dfd4f9dbd300
-
SHA256
b4e9b4abd1b90a724a073f7acd9ddbe34a547f2c53ff0c9740b43f408253b302
-
SHA512
b06a46bbe152ee2dcb33e5f159c59e012b44a647528b2a6604a238afcb6db9365518d5edcb35aa824e8d3e97ae6a392ca0db3e151f2e8961daccaed11a720c5f
-
SSDEEP
24576:6cs2AwjOQIRP6XDFpxbV3mD7qcURNP6RNPyvzR:6cs2AqOQIA3xpOecURNP6RNPybR
Static task
static1
Behavioral task
behavioral1
Sample
f45e5a09535db4501c895ca74bbc5b8c_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
darkcomet
Guest16
127.0.0.1:1604
DC_MUTEX-BQKM08T
-
gencode
Vmwer6npedDB
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
f45e5a09535db4501c895ca74bbc5b8c_JaffaCakes118
-
Size
808KB
-
MD5
f45e5a09535db4501c895ca74bbc5b8c
-
SHA1
51dcc9d90c2ef023f83f9f929ab9dfd4f9dbd300
-
SHA256
b4e9b4abd1b90a724a073f7acd9ddbe34a547f2c53ff0c9740b43f408253b302
-
SHA512
b06a46bbe152ee2dcb33e5f159c59e012b44a647528b2a6604a238afcb6db9365518d5edcb35aa824e8d3e97ae6a392ca0db3e151f2e8961daccaed11a720c5f
-
SSDEEP
24576:6cs2AwjOQIRP6XDFpxbV3mD7qcURNP6RNPyvzR:6cs2AqOQIA3xpOecURNP6RNPybR
-
Program crash
-
Suspicious use of SetThreadContext
-