General
-
Target
063ce2b4899e742b8c0f078bdcb6d6be_JaffaCakes118
-
Size
1.0MB
-
Sample
240428-2n5f5aba59
-
MD5
063ce2b4899e742b8c0f078bdcb6d6be
-
SHA1
09496fb14005fa2d08e8687f0e2cd77752a62cf4
-
SHA256
8f80835cb9d369e599e4a1992f948b4bed108f74b47ae3a90da360fa1609acca
-
SHA512
74122ea8d875bea1787aa7bf6eec38937a2398d49524f4f81499a55f08ee205535c48b66407fee0caf34b8add967b88765883432732bf0cc8b31aea9931c3638
-
SSDEEP
24576:2oa9YyDOt81++IqQbTStuQTrensKDvJyEF2RzfCCGsSKG:2oa9RDo81i6IQen7YEYdCxfJ
Static task
static1
Behavioral task
behavioral1
Sample
063ce2b4899e742b8c0f078bdcb6d6be_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
063ce2b4899e742b8c0f078bdcb6d6be_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
063ce2b4899e742b8c0f078bdcb6d6be_JaffaCakes118
-
Size
1.0MB
-
MD5
063ce2b4899e742b8c0f078bdcb6d6be
-
SHA1
09496fb14005fa2d08e8687f0e2cd77752a62cf4
-
SHA256
8f80835cb9d369e599e4a1992f948b4bed108f74b47ae3a90da360fa1609acca
-
SHA512
74122ea8d875bea1787aa7bf6eec38937a2398d49524f4f81499a55f08ee205535c48b66407fee0caf34b8add967b88765883432732bf0cc8b31aea9931c3638
-
SSDEEP
24576:2oa9YyDOt81++IqQbTStuQTrensKDvJyEF2RzfCCGsSKG:2oa9RDo81i6IQen7YEYdCxfJ
Score7/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-