General
-
Target
561aaa59b84a7fd7c8436b5d47fda319_JaffaCakes118
-
Size
5.0MB
-
Sample
240518-wrq51sgf75
-
MD5
561aaa59b84a7fd7c8436b5d47fda319
-
SHA1
f4e1395cc7a3a6a6e98d51dba66560cec46b7f7d
-
SHA256
3659bd29104688f4aec05ecad294db34429e49096983768873038dc7fdbcc494
-
SHA512
2d415664e27883d524da987d12c26ef0d632a159c19b3e7182f4dac00e28921a4c523bff04bee0f95fa796948a91d9be6d35e650af27edfa2a8decda619b0995
-
SSDEEP
98304:dDqPoBhQ1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:dDqPR1Cxcxk3ZAEUadzR8yc4H
Static task
static1
Behavioral task
behavioral1
Sample
561aaa59b84a7fd7c8436b5d47fda319_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
561aaa59b84a7fd7c8436b5d47fda319_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
561aaa59b84a7fd7c8436b5d47fda319_JaffaCakes118
-
Size
5.0MB
-
MD5
561aaa59b84a7fd7c8436b5d47fda319
-
SHA1
f4e1395cc7a3a6a6e98d51dba66560cec46b7f7d
-
SHA256
3659bd29104688f4aec05ecad294db34429e49096983768873038dc7fdbcc494
-
SHA512
2d415664e27883d524da987d12c26ef0d632a159c19b3e7182f4dac00e28921a4c523bff04bee0f95fa796948a91d9be6d35e650af27edfa2a8decda619b0995
-
SSDEEP
98304:dDqPoBhQ1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:dDqPR1Cxcxk3ZAEUadzR8yc4H
Score10/10-
Contacts a large (3258) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-