General
-
Target
a38af9da4d563a71dd17ab22640cc3c8_JaffaCakes118
-
Size
5.0MB
-
Sample
240613-c12hka1eqa
-
MD5
a38af9da4d563a71dd17ab22640cc3c8
-
SHA1
0c902c748adee5a0631fad49de85474764dbc6a1
-
SHA256
4e5f036c0c8fb09f0c37a539f5d89e5afa783fce106db242de952f014ae9655f
-
SHA512
4a03e0b4bf63038ede4a2998b241168fa14bc31da0991674ac687b4acb5ca44f69a1444afccf92d91023bbddc06907307aa274921daff9f403815d3e64106a12
-
SSDEEP
49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA
Static task
static1
Behavioral task
behavioral1
Sample
a38af9da4d563a71dd17ab22640cc3c8_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a38af9da4d563a71dd17ab22640cc3c8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
a38af9da4d563a71dd17ab22640cc3c8_JaffaCakes118
-
Size
5.0MB
-
MD5
a38af9da4d563a71dd17ab22640cc3c8
-
SHA1
0c902c748adee5a0631fad49de85474764dbc6a1
-
SHA256
4e5f036c0c8fb09f0c37a539f5d89e5afa783fce106db242de952f014ae9655f
-
SHA512
4a03e0b4bf63038ede4a2998b241168fa14bc31da0991674ac687b4acb5ca44f69a1444afccf92d91023bbddc06907307aa274921daff9f403815d3e64106a12
-
SSDEEP
49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA
Score10/10-
Contacts a large (2666) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-