General
-
Target
4530287b986059fc1b9e2bb72c85f687_JaffaCakes118
-
Size
907KB
-
Sample
240515-jpeb8afh4z
-
MD5
4530287b986059fc1b9e2bb72c85f687
-
SHA1
8b9c018b8197add1012dc27cdaf22ec400f18189
-
SHA256
7a92ba2e9b658377e73f35b1ef0fb237ef8198752d3b63efcebff47eac25842b
-
SHA512
56390a9daca961445905caa99387c32e9140919fd6a3324cf08c62d68306afd41000060decbcebcd4caa05ee4b6cdaae1233dbd89eaee12f122aeebd9e7a1bcc
-
SSDEEP
24576:5BXu9HGaVH59fRyuLxTzdQdX5o0G3uDZzB:5w9VH56eqM0E8Zz
Behavioral task
behavioral1
Sample
4530287b986059fc1b9e2bb72c85f687_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
4530287b986059fc1b9e2bb72c85f687_JaffaCakes118
-
Size
907KB
-
MD5
4530287b986059fc1b9e2bb72c85f687
-
SHA1
8b9c018b8197add1012dc27cdaf22ec400f18189
-
SHA256
7a92ba2e9b658377e73f35b1ef0fb237ef8198752d3b63efcebff47eac25842b
-
SHA512
56390a9daca961445905caa99387c32e9140919fd6a3324cf08c62d68306afd41000060decbcebcd4caa05ee4b6cdaae1233dbd89eaee12f122aeebd9e7a1bcc
-
SSDEEP
24576:5BXu9HGaVH59fRyuLxTzdQdX5o0G3uDZzB:5w9VH56eqM0E8Zz
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-