General
-
Target
a36068f857707c6669a82529beb0dad1_JaffaCakes118
-
Size
1.1MB
-
Sample
240613-bykllashnq
-
MD5
a36068f857707c6669a82529beb0dad1
-
SHA1
984caad0aafd2d5d501797975476b7f987f1ff12
-
SHA256
fcc5d27ace0139e1755c7df5fda95630457d1ea8778cea11f1cd6525492caf70
-
SHA512
8f5771e35d78a222f4992a7ac9849fb7d697aaee0bac1bfa93078f65432e9d7c5829c634e7c7423ca88da5b1a30ce0074a6e641eef608bb1ee36f1a9671250c3
-
SSDEEP
24576:T8vLvb1yMby1E51gyoMD/9+rSOPTW8prD:TWtbKELB6rhW8hD
Static task
static1
Behavioral task
behavioral1
Sample
a36068f857707c6669a82529beb0dad1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a36068f857707c6669a82529beb0dad1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
a36068f857707c6669a82529beb0dad1_JaffaCakes118
-
Size
1.1MB
-
MD5
a36068f857707c6669a82529beb0dad1
-
SHA1
984caad0aafd2d5d501797975476b7f987f1ff12
-
SHA256
fcc5d27ace0139e1755c7df5fda95630457d1ea8778cea11f1cd6525492caf70
-
SHA512
8f5771e35d78a222f4992a7ac9849fb7d697aaee0bac1bfa93078f65432e9d7c5829c634e7c7423ca88da5b1a30ce0074a6e641eef608bb1ee36f1a9671250c3
-
SSDEEP
24576:T8vLvb1yMby1E51gyoMD/9+rSOPTW8prD:TWtbKELB6rhW8hD
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-