General
- Target a6ca17b02d6260807adffbdb9d120c6a_JaffaCakes118
- Size 600KB
- Sample240613-1yllbssaqf
- SHA256 a9fece0ec0ee4df48f7d0f3acdce57dcc11444e4c22a0d62b2c80b6d73a12434
- MD5 a6ca17b02d6260807adffbdb9d120c6a
- SHA1 d6c169dd666f363403c4bcf122bc57b309a69ee6
- SHA512 2ddd77509575f84270703dd3ee414547f88440f24464c80b9eed5cf1a30a5e73e2794a4abdfec553369ce9c6ec7b1ddc312f507f4af1b4d7561e6f07af58d4e1
- SSDEEP 12288:Pnp7MTrnNc4cMCEASQPCnXYjCsCutCfAIh+ww3d:vpITTNcmkS0CnIjoNhat
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
a6ca17b02d6260807adffbdb9d120c6a_JaffaCakes118.exe
Resource
win7-20240611-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
a6ca17b02d6260807adffbdb9d120c6a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target a6ca17b02d6260807adffbdb9d120c6a_JaffaCakes118
- Size 600KB
- SHA256 a9fece0ec0ee4df48f7d0f3acdce57dcc11444e4c22a0d62b2c80b6d73a12434
- MD5 a6ca17b02d6260807adffbdb9d120c6a
- SHA1 d6c169dd666f363403c4bcf122bc57b309a69ee6
- SHA512 2ddd77509575f84270703dd3ee414547f88440f24464c80b9eed5cf1a30a5e73e2794a4abdfec553369ce9c6ec7b1ddc312f507f4af1b4d7561e6f07af58d4e1
- SSDEEP 12288:Pnp7MTrnNc4cMCEASQPCnXYjCsCutCfAIh+ww3d:vpITTNcmkS0CnIjoNhat
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext