General
- Target 7538d072088c3c7ea2135c9304d9915b_JaffaCakes118
- Size 4.7MB
- Sample240526-mtardafe2v
- SHA256 34c269004b5f9df0235c546a55459ab6cf82f19832ecc1bb1168bd281d9a22bd
- MD5 7538d072088c3c7ea2135c9304d9915b
- SHA1 fb961162b87e351d626fa12c17a38493ec48df87
- SHA512 9bf350a834816f45185536c9efe6542bdc15074cd49fd32ee5ad1d44ebefec2d09fdecb7c3ed6f0584afb05addfbf92ca9f79e1cfea41a9b921ecb0a209b2b2b
- SSDEEP 98304:hjJP7a4N6UTDwmK6MiCRMxc5jXzIUJLKnsgTPgN+9zTha4YilLmzJoc:BJW4snP6ZOMW8UKfUN+RThMKLHc
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
7538d072088c3c7ea2135c9304d9915b_JaffaCakes118.exe
Resource
win7-20240221-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 7538d072088c3c7ea2135c9304d9915b_JaffaCakes118
- Size 4.7MB
- SHA256 34c269004b5f9df0235c546a55459ab6cf82f19832ecc1bb1168bd281d9a22bd
- MD5 7538d072088c3c7ea2135c9304d9915b
- SHA1 fb961162b87e351d626fa12c17a38493ec48df87
- SHA512 9bf350a834816f45185536c9efe6542bdc15074cd49fd32ee5ad1d44ebefec2d09fdecb7c3ed6f0584afb05addfbf92ca9f79e1cfea41a9b921ecb0a209b2b2b
- SSDEEP 98304:hjJP7a4N6UTDwmK6MiCRMxc5jXzIUJLKnsgTPgN+9zTha4YilLmzJoc:BJW4snP6ZOMW8UKfUN+RThMKLHc
- MD5 SHA1 SHA512 SSDEEP
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
Suspicious use of SetThreadContext