General
-
Target
299eef4dfbebf5a731ceba984f72f31f_JaffaCakes118
-
Size
244KB
-
Sample
240509-m1cvbage97
-
MD5
299eef4dfbebf5a731ceba984f72f31f
-
SHA1
6c98c4277abf55dde2f144bf2c6cd39d97e6fe54
-
SHA256
66e329f9e67d57f2ce857c424e452942f1d952afb1ca0af00ba363f72c64e7d2
-
SHA512
11baddec46a37f28e9e5179d4a50b9c612ab2c67616cb3d633845a031ceff76c48f5b76e2d114fa8f28cf36d49ea77847285fa24b0960a557da18a09f81f6a27
-
SSDEEP
6144:kKKz5jtxT8gC6iH9sVjfbGyoxLaKZY2e:BKz5hxT06isdSBtJ
Static task
static1
Behavioral task
behavioral1
Sample
299eef4dfbebf5a731ceba984f72f31f_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
299eef4dfbebf5a731ceba984f72f31f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
299eef4dfbebf5a731ceba984f72f31f_JaffaCakes118
-
Size
244KB
-
MD5
299eef4dfbebf5a731ceba984f72f31f
-
SHA1
6c98c4277abf55dde2f144bf2c6cd39d97e6fe54
-
SHA256
66e329f9e67d57f2ce857c424e452942f1d952afb1ca0af00ba363f72c64e7d2
-
SHA512
11baddec46a37f28e9e5179d4a50b9c612ab2c67616cb3d633845a031ceff76c48f5b76e2d114fa8f28cf36d49ea77847285fa24b0960a557da18a09f81f6a27
-
SSDEEP
6144:kKKz5jtxT8gC6iH9sVjfbGyoxLaKZY2e:BKz5hxT06isdSBtJ
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious use of SetThreadContext
-