General
-
Target
7821cdd80b8eda65f74050aad969ab4a_JaffaCakes118
-
Size
1.4MB
-
Sample
240527-gp47jaad4s
-
MD5
7821cdd80b8eda65f74050aad969ab4a
-
SHA1
011e18bc9c8183617f242ea93875a68b58a4d5cd
-
SHA256
18e231b913c78cbca6374618bf2ba98bc1f95b6665a5a523e196bcaea49a6b78
-
SHA512
6272da30f94b7ad042aa4d7b13f35d63cdc55fdea6f09180a7630fc37694b66a42c1d17dd5da1962b14bde313289ba65c17f9d586b69089c7e6130483756bdb2
-
SSDEEP
24576:mlemJ1spl15VmsHuIghJO7CMOEc3y7Jgb:ml91spl15csug3OEc3y76b
Static task
static1
Behavioral task
behavioral1
Sample
7821cdd80b8eda65f74050aad969ab4a_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7821cdd80b8eda65f74050aad969ab4a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
7821cdd80b8eda65f74050aad969ab4a_JaffaCakes118
-
Size
1.4MB
-
MD5
7821cdd80b8eda65f74050aad969ab4a
-
SHA1
011e18bc9c8183617f242ea93875a68b58a4d5cd
-
SHA256
18e231b913c78cbca6374618bf2ba98bc1f95b6665a5a523e196bcaea49a6b78
-
SHA512
6272da30f94b7ad042aa4d7b13f35d63cdc55fdea6f09180a7630fc37694b66a42c1d17dd5da1962b14bde313289ba65c17f9d586b69089c7e6130483756bdb2
-
SSDEEP
24576:mlemJ1spl15VmsHuIghJO7CMOEc3y7Jgb:ml91spl15csug3OEc3y76b
Score7/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-