General
- Target a71d8dd7e6680716b883f8df2381a828_JaffaCakes118
- Size 4.7MB
- Sample240613-3ht9msvgpe
- SHA256 205ccdf66bd9c7092e54b658256a82b590317160bc928581840ebdb942bd23e5
- MD5 a71d8dd7e6680716b883f8df2381a828
- SHA1 bbc34fc84a8e9f5a31e0f4ab9a0dd7036535d256
- SHA512 fc0b0146315b2fa3f55f2710e31b5db8106e9090b79e2849d53ead474bacd43cac0a6fc1609934ca8a23a301c80b39671d4158aeb4e5ed1313f8dce87dc0d61b
- SSDEEP 98304:hjJP7a4N6UTDwmK6MiCRMxc5jXzIUJLKnsgTPgN+9zTha4YilLmzJoF:BJW4snP6ZOMW8UKfUN+RThMKLHF
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
a71d8dd7e6680716b883f8df2381a828_JaffaCakes118.exe
Resource
win7-20240221-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a71d8dd7e6680716b883f8df2381a828_JaffaCakes118
- Size 4.7MB
- SHA256 205ccdf66bd9c7092e54b658256a82b590317160bc928581840ebdb942bd23e5
- MD5 a71d8dd7e6680716b883f8df2381a828
- SHA1 bbc34fc84a8e9f5a31e0f4ab9a0dd7036535d256
- SHA512 fc0b0146315b2fa3f55f2710e31b5db8106e9090b79e2849d53ead474bacd43cac0a6fc1609934ca8a23a301c80b39671d4158aeb4e5ed1313f8dce87dc0d61b
- SSDEEP 98304:hjJP7a4N6UTDwmK6MiCRMxc5jXzIUJLKnsgTPgN+9zTha4YilLmzJoF:BJW4snP6ZOMW8UKfUN+RThMKLHF
- MD5 SHA1 SHA512 SSDEEP
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext