General
-
Target
7ad8f09dbf37a9ac38867788146f0116_JaffaCakes118
-
Size
1.1MB
-
Sample
240527-2zk7maed48
-
MD5
7ad8f09dbf37a9ac38867788146f0116
-
SHA1
9b7700f89bcddb5227610c53a4bd63f5ed863f1b
-
SHA256
22ee55d78c8eddf91148df178239e21d9ea4a372d139755e9cb61866dd466796
-
SHA512
0cdf2180d4fc02556b8547c202ae9aaa9a9a2cdef8c52ab5df55446da8676c848dc03a4392a396bc0d49c5c8305abf575eb6bc30adc92e40d2720b817aec5815
-
SSDEEP
24576:tcWdcRqqXDRypx3iTY+5qWkEQrtEoH4PC40Rt5:tc5mdjeoHsC3P5
Static task
static1
Behavioral task
behavioral1
Sample
7ad8f09dbf37a9ac38867788146f0116_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7ad8f09dbf37a9ac38867788146f0116_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
7ad8f09dbf37a9ac38867788146f0116_JaffaCakes118
-
Size
1.1MB
-
MD5
7ad8f09dbf37a9ac38867788146f0116
-
SHA1
9b7700f89bcddb5227610c53a4bd63f5ed863f1b
-
SHA256
22ee55d78c8eddf91148df178239e21d9ea4a372d139755e9cb61866dd466796
-
SHA512
0cdf2180d4fc02556b8547c202ae9aaa9a9a2cdef8c52ab5df55446da8676c848dc03a4392a396bc0d49c5c8305abf575eb6bc30adc92e40d2720b817aec5815
-
SSDEEP
24576:tcWdcRqqXDRypx3iTY+5qWkEQrtEoH4PC40Rt5:tc5mdjeoHsC3P5
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-