General
-
Target
c011639e6a15fe27d114b552977cfc07_JaffaCakes118.exe
-
Size
69KB
-
Sample
240504-ynv1xacd52
-
MD5
c011639e6a15fe27d114b552977cfc07
-
SHA1
d28f33953e6ae7294163d2908e0b828810d261a7
-
SHA256
2c51dd8c892d7852051f8cff6bb4cea70117b2b32aeb3ecd297ff2626065e0c7
-
SHA512
904034e6c609022cc1e451b023aa62288f93ebe60d6f6357c1f4e231e682d50a4ce609f09e34ed6ff984fe92ca3930cfe57e30052e8b739bc245d1737002ab16
-
SSDEEP
1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhu:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsL
Static task
static1
Behavioral task
behavioral1
Sample
c011639e6a15fe27d114b552977cfc07_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c011639e6a15fe27d114b552977cfc07_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
c011639e6a15fe27d114b552977cfc07_JaffaCakes118.exe
-
Size
69KB
-
MD5
c011639e6a15fe27d114b552977cfc07
-
SHA1
d28f33953e6ae7294163d2908e0b828810d261a7
-
SHA256
2c51dd8c892d7852051f8cff6bb4cea70117b2b32aeb3ecd297ff2626065e0c7
-
SHA512
904034e6c609022cc1e451b023aa62288f93ebe60d6f6357c1f4e231e682d50a4ce609f09e34ed6ff984fe92ca3930cfe57e30052e8b739bc245d1737002ab16
-
SSDEEP
1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhu:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsL
Score9/10-
Renames multiple (3652) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-