General
-
Target
0e0f26990fcd9cfca701cf0a3b5453ef_JaffaCakes118
-
Size
1.1MB
-
Sample
240502-kwrfssdf2z
-
MD5
0e0f26990fcd9cfca701cf0a3b5453ef
-
SHA1
03535fcd98358f9b223198665de99b0445200151
-
SHA256
47faf970d9ffbd4b00d71422c8d085031cc886cc38f954f944795919077110e8
-
SHA512
e8ed55c83645e25afcf3e918cd59224c95df3bff3d0b701f1367ceae2542c2aa1f2d3822a3945d9f06560e3c012e7beb63831c7bf74baa46e79807863d108204
-
SSDEEP
24576:xqqG0ss+JPptGgRUbUrMymVxVYRdZDoHyhVr4B2+WFw2:rG0aPpUgvrMymVxV0Z8SVSD6l
Static task
static1
Behavioral task
behavioral1
Sample
0e0f26990fcd9cfca701cf0a3b5453ef_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0e0f26990fcd9cfca701cf0a3b5453ef_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
0e0f26990fcd9cfca701cf0a3b5453ef_JaffaCakes118
-
Size
1.1MB
-
MD5
0e0f26990fcd9cfca701cf0a3b5453ef
-
SHA1
03535fcd98358f9b223198665de99b0445200151
-
SHA256
47faf970d9ffbd4b00d71422c8d085031cc886cc38f954f944795919077110e8
-
SHA512
e8ed55c83645e25afcf3e918cd59224c95df3bff3d0b701f1367ceae2542c2aa1f2d3822a3945d9f06560e3c012e7beb63831c7bf74baa46e79807863d108204
-
SSDEEP
24576:xqqG0ss+JPptGgRUbUrMymVxVYRdZDoHyhVr4B2+WFw2:rG0aPpUgvrMymVxV0Z8SVSD6l
-
XMRig Miner payload
-
Drops startup file
-
Suspicious use of SetThreadContext
-