General
-
Target
9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118
-
Size
1.2MB
-
Sample
240610-fsaawsdb78
-
MD5
9a654c7a4c2e9c89fe8b8cfd6675150c
-
SHA1
6e96a75bfb0594863ae4e625dfdc1b9ba46a8b13
-
SHA256
f66895b1e158392dd6bba2e705799955ba7aa21a03bad6d315863fbfac80d804
-
SHA512
69a658162d81be77e200c4f03ae503aa6f5467e5cf7ff123bb98f9b6f677da0c7c4e2abc41a950ee29b86d14395d043112fe511ad9d4066b51d637b92f9c58bf
-
SSDEEP
24576:7tb20pkaCqT5TBWgNQ7aYvjAFjcTsd06A:4Vg5tQ7aYvjAFjcTF5
Static task
static1
Behavioral task
behavioral1
Sample
9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118
-
Size
1.2MB
-
MD5
9a654c7a4c2e9c89fe8b8cfd6675150c
-
SHA1
6e96a75bfb0594863ae4e625dfdc1b9ba46a8b13
-
SHA256
f66895b1e158392dd6bba2e705799955ba7aa21a03bad6d315863fbfac80d804
-
SHA512
69a658162d81be77e200c4f03ae503aa6f5467e5cf7ff123bb98f9b6f677da0c7c4e2abc41a950ee29b86d14395d043112fe511ad9d4066b51d637b92f9c58bf
-
SSDEEP
24576:7tb20pkaCqT5TBWgNQ7aYvjAFjcTsd06A:4Vg5tQ7aYvjAFjcTF5
Score6/10-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-