General
-
Target
2598ebf1b561402e5a4c9042514ac04d_JaffaCakes118
-
Size
1.3MB
-
Sample
240508-tcga6aef29
-
MD5
2598ebf1b561402e5a4c9042514ac04d
-
SHA1
a888bbd8d3c26c99e3eb49b3121d669c340687ec
-
SHA256
5b8369fd8e0ee96e8a54151a110628c79df21ab82ef65910e92feb40afe1757b
-
SHA512
5cc1ce18ef0242d6519055cf4cf1fa3300682a6a8ed77232135e178eeba457402dcafc747a26898e0d525a0b5ba57890b5472e62236fb4d5ef888020d3b644f0
-
SSDEEP
24576:7gHEvJo0mfNy/JCGaje+vwc3U5DZhMoP8iQQLCb9Slqk:EEa04y/JC3vx3U5v1GQI9r
Static task
static1
Behavioral task
behavioral1
Sample
2598ebf1b561402e5a4c9042514ac04d_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Extracted
formbook
2.6
hx48
click-list.info
Targets
-
-
Target
2598ebf1b561402e5a4c9042514ac04d_JaffaCakes118
-
Size
1.3MB
-
MD5
2598ebf1b561402e5a4c9042514ac04d
-
SHA1
a888bbd8d3c26c99e3eb49b3121d669c340687ec
-
SHA256
5b8369fd8e0ee96e8a54151a110628c79df21ab82ef65910e92feb40afe1757b
-
SHA512
5cc1ce18ef0242d6519055cf4cf1fa3300682a6a8ed77232135e178eeba457402dcafc747a26898e0d525a0b5ba57890b5472e62236fb4d5ef888020d3b644f0
-
SSDEEP
24576:7gHEvJo0mfNy/JCGaje+vwc3U5DZhMoP8iQQLCb9Slqk:EEa04y/JC3vx3U5v1GQI9r
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-