General
-
Target
01ed7a0736a9ce4e20dda1d54996b24b_JaffaCakes118
-
Size
425KB
-
Sample
240426-3nt6tsfd4t
-
MD5
01ed7a0736a9ce4e20dda1d54996b24b
-
SHA1
5078fc78a06bf2f969ab86ca08a35543b14a6796
-
SHA256
b0e2f1988177202030f83b5bb2505dad99827cb2f3bf16292e7c484f1a56828b
-
SHA512
0bdc4bb0e6f891100715fdf3e826da329666f7f33a2d9bcb38bc94dce8d5a1fb1a58b13f5e499a422a50a7544e99b520459f37ea3e9785dc1e71e4cf3d3044c6
-
SSDEEP
6144:UZfec9EbXDk6RkdKU/UOPSe570Szp37E2Eo:UZWtI6RkqOB07o
Static task
static1
Behavioral task
behavioral1
Sample
01ed7a0736a9ce4e20dda1d54996b24b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01ed7a0736a9ce4e20dda1d54996b24b_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
01ed7a0736a9ce4e20dda1d54996b24b_JaffaCakes118
-
Size
425KB
-
MD5
01ed7a0736a9ce4e20dda1d54996b24b
-
SHA1
5078fc78a06bf2f969ab86ca08a35543b14a6796
-
SHA256
b0e2f1988177202030f83b5bb2505dad99827cb2f3bf16292e7c484f1a56828b
-
SHA512
0bdc4bb0e6f891100715fdf3e826da329666f7f33a2d9bcb38bc94dce8d5a1fb1a58b13f5e499a422a50a7544e99b520459f37ea3e9785dc1e71e4cf3d3044c6
-
SSDEEP
6144:UZfec9EbXDk6RkdKU/UOPSe570Szp37E2Eo:UZWtI6RkqOB07o
Score10/10-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Sets file execution options in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-