General
-
Target
8ba5c0a756339f88d467e22912c9e7dd_JaffaCakes118
-
Size
1.1MB
-
Sample
240601-y152msee83
-
MD5
8ba5c0a756339f88d467e22912c9e7dd
-
SHA1
3e858e572e6a867d8597ddb848ce43a11f426a9a
-
SHA256
8fa46a6da2c4c60f00274cf75ad19d161a8ec52538d683945382d38cd56e5515
-
SHA512
46c36b2e481ebacbbdf0ccdc63a82985a764f843020f6e55e396b3972ee9112931ef0a99a76f2537ad897e7c9632706a6e2c11264b19fbd914fe1d999bb6d171
-
SSDEEP
24576:6MjtdFF1r7tQLf/9fOeEfJkgvvEEWhtkk9vrinq:ljtHf1oJA1iWyvrR
Static task
static1
Behavioral task
behavioral1
Sample
8ba5c0a756339f88d467e22912c9e7dd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ba5c0a756339f88d467e22912c9e7dd_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
8ba5c0a756339f88d467e22912c9e7dd_JaffaCakes118
-
Size
1.1MB
-
MD5
8ba5c0a756339f88d467e22912c9e7dd
-
SHA1
3e858e572e6a867d8597ddb848ce43a11f426a9a
-
SHA256
8fa46a6da2c4c60f00274cf75ad19d161a8ec52538d683945382d38cd56e5515
-
SHA512
46c36b2e481ebacbbdf0ccdc63a82985a764f843020f6e55e396b3972ee9112931ef0a99a76f2537ad897e7c9632706a6e2c11264b19fbd914fe1d999bb6d171
-
SSDEEP
24576:6MjtdFF1r7tQLf/9fOeEfJkgvvEEWhtkk9vrinq:ljtHf1oJA1iWyvrR
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-