General
-
Target
11416ba28eb8e03657d4d228e1ed8afc_JaffaCakes118
-
Size
5.0MB
-
Sample
240504-c17dtaeb29
-
MD5
11416ba28eb8e03657d4d228e1ed8afc
-
SHA1
daa51750ff5aa847f06cf16f74d348d921fada62
-
SHA256
4196a9d55800bb361a18d3a5c72ffc3b12054c956c03dfff7f5ad34205459958
-
SHA512
4686f56b028218593ca85ea2ea10eeef05f82817a8ba8541f58466e55fc62428fe4ad5b154f048d86960e65e1ce59c59a0d129388ef213fda1713cca6a48d20b
-
SSDEEP
49152:RnnMSPbcBVQej/1INRx+TSqTdX1H06SAARdhnv:1nPoBhz1aRxcSUD06SAEdhv
Static task
static1
Behavioral task
behavioral1
Sample
11416ba28eb8e03657d4d228e1ed8afc_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
11416ba28eb8e03657d4d228e1ed8afc_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
11416ba28eb8e03657d4d228e1ed8afc_JaffaCakes118
-
Size
5.0MB
-
MD5
11416ba28eb8e03657d4d228e1ed8afc
-
SHA1
daa51750ff5aa847f06cf16f74d348d921fada62
-
SHA256
4196a9d55800bb361a18d3a5c72ffc3b12054c956c03dfff7f5ad34205459958
-
SHA512
4686f56b028218593ca85ea2ea10eeef05f82817a8ba8541f58466e55fc62428fe4ad5b154f048d86960e65e1ce59c59a0d129388ef213fda1713cca6a48d20b
-
SSDEEP
49152:RnnMSPbcBVQej/1INRx+TSqTdX1H06SAARdhnv:1nPoBhz1aRxcSUD06SAEdhv
Score10/10-
Contacts a large (3277) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-