General
-
Target
f75e62ac4e669400eb9d0bc0e5cc4975_JaffaCakes118
-
Size
359KB
-
Sample
240418-f88hmace62
-
MD5
f75e62ac4e669400eb9d0bc0e5cc4975
-
SHA1
eaafae603651df3c5d197cbacd4546986a57fcad
-
SHA256
7873b707210e94ff3518c98fb1ec78bb65c9f88d06a3ff3ae3e0a4fc92829ce3
-
SHA512
32554ca518fbf6685ca3bf55cfbc82b70392f086c60ebed5c4b2e248cc4e68d40c657c7cdc31239eedd3b436ae61551b666116d1a979c88b3e5aeddd90621832
-
SSDEEP
6144:XBnQ+Y3O6wOB1jOwKyIHqbuXseiFaGPYJyQXa1NiVpIInbXkzi6wZRiZZ:XS+16bKyIHqbQ3iNPyzENiVFKwno
Static task
static1
Behavioral task
behavioral1
Sample
f75e62ac4e669400eb9d0bc0e5cc4975_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f75e62ac4e669400eb9d0bc0e5cc4975_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
f75e62ac4e669400eb9d0bc0e5cc4975_JaffaCakes118
-
Size
359KB
-
MD5
f75e62ac4e669400eb9d0bc0e5cc4975
-
SHA1
eaafae603651df3c5d197cbacd4546986a57fcad
-
SHA256
7873b707210e94ff3518c98fb1ec78bb65c9f88d06a3ff3ae3e0a4fc92829ce3
-
SHA512
32554ca518fbf6685ca3bf55cfbc82b70392f086c60ebed5c4b2e248cc4e68d40c657c7cdc31239eedd3b436ae61551b666116d1a979c88b3e5aeddd90621832
-
SSDEEP
6144:XBnQ+Y3O6wOB1jOwKyIHqbuXseiFaGPYJyQXa1NiVpIInbXkzi6wZRiZZ:XS+16bKyIHqbQ3iNPyzENiVFKwno
Score10/10-
Modifies WinLogon for persistence
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-