General
-
Target
fe1b972a9db500bff9117404066cff4e_JaffaCakes118
-
Size
506KB
-
Sample
240421-btyyesfd77
-
MD5
fe1b972a9db500bff9117404066cff4e
-
SHA1
e58fab8afc595d27868e7b5a7bbfb32e1697fa2a
-
SHA256
2c80914ef762ad1be664d4ecd91894091272b5924e0331689a18c99b0ed6e999
-
SHA512
2c8ebaea512f4c6c0d4c3d7ec5fa295abb0a439652a31b86236736204073ee48b756df9effaf3f081f8b48906e2f4fc968ba9d3c261589b91827e3877131fab3
-
SSDEEP
12288:8E9INzUfoniEYXaA0wMklyNamXhAinjCyv+l79Ugz:L90zjW5Mkl8LhcOA7K2
Static task
static1
Behavioral task
behavioral1
Sample
fe1b972a9db500bff9117404066cff4e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe1b972a9db500bff9117404066cff4e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fe1b972a9db500bff9117404066cff4e_JaffaCakes118
-
Size
506KB
-
MD5
fe1b972a9db500bff9117404066cff4e
-
SHA1
e58fab8afc595d27868e7b5a7bbfb32e1697fa2a
-
SHA256
2c80914ef762ad1be664d4ecd91894091272b5924e0331689a18c99b0ed6e999
-
SHA512
2c8ebaea512f4c6c0d4c3d7ec5fa295abb0a439652a31b86236736204073ee48b756df9effaf3f081f8b48906e2f4fc968ba9d3c261589b91827e3877131fab3
-
SSDEEP
12288:8E9INzUfoniEYXaA0wMklyNamXhAinjCyv+l79Ugz:L90zjW5Mkl8LhcOA7K2
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-