General
-
Target
a358ee59fc0931f1ae2eae134e7b2959_JaffaCakes118
-
Size
1.3MB
-
Sample
240613-br5yyssfmm
-
MD5
a358ee59fc0931f1ae2eae134e7b2959
-
SHA1
ea2eb3581eba66e0895adc7f40bd7553ca715b56
-
SHA256
b32eabfffa4d397b1c9b76e9a5d9f84221a24723a94efbd994d952fd86b4b3c4
-
SHA512
7135e9d9b5eadc06e75280412e830aad9d8ccf73a37fa55d9124724b2e9d1f1ac268b203ec121c7360ba948465a62337f2ab8628f804698e4cbef19fa43269d5
-
SSDEEP
24576:ff9XGBmFTuP87DS2riSCzG7IPRosJWlvjc2Ux7aZDp5DtCL:nwoJDS2OSB7IPmdFUwbDtCL
Static task
static1
Behavioral task
behavioral1
Sample
a358ee59fc0931f1ae2eae134e7b2959_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a358ee59fc0931f1ae2eae134e7b2959_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
a358ee59fc0931f1ae2eae134e7b2959_JaffaCakes118
-
Size
1.3MB
-
MD5
a358ee59fc0931f1ae2eae134e7b2959
-
SHA1
ea2eb3581eba66e0895adc7f40bd7553ca715b56
-
SHA256
b32eabfffa4d397b1c9b76e9a5d9f84221a24723a94efbd994d952fd86b4b3c4
-
SHA512
7135e9d9b5eadc06e75280412e830aad9d8ccf73a37fa55d9124724b2e9d1f1ac268b203ec121c7360ba948465a62337f2ab8628f804698e4cbef19fa43269d5
-
SSDEEP
24576:ff9XGBmFTuP87DS2riSCzG7IPRosJWlvjc2Ux7aZDp5DtCL:nwoJDS2OSB7IPmdFUwbDtCL
Score7/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-