General
- Target a38c27d7c5f12d94be013c4dcb37eefb_JaffaCakes118
- Size 3.8MB
- Sample240613-c3asmavenm
- SHA256 7c8d258b32a7c6e61f7a3f6dab50c3f612247d225847cfc568e13bd973859d3a
- MD5 a38c27d7c5f12d94be013c4dcb37eefb
- SHA1 8ca58554550b799d0b89a7fb8f0ad059cf05250c
- SHA512 c74f8f9d92ee5467c487e57b62cdfb0fc65899ee5692ae997744248a58f3d41b52a309d409c01c95057cdb874696cbfe543494c83a67573d3cb4ebf96a7bfed7
- SSDEEP 98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdS:uZHrzyG+2aDHGkS8Cg
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
a38c27d7c5f12d94be013c4dcb37eefb_JaffaCakes118.exe
Resource
win7-20240611-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a38c27d7c5f12d94be013c4dcb37eefb_JaffaCakes118
- Size 3.8MB
- SHA256 7c8d258b32a7c6e61f7a3f6dab50c3f612247d225847cfc568e13bd973859d3a
- MD5 a38c27d7c5f12d94be013c4dcb37eefb
- SHA1 8ca58554550b799d0b89a7fb8f0ad059cf05250c
- SHA512 c74f8f9d92ee5467c487e57b62cdfb0fc65899ee5692ae997744248a58f3d41b52a309d409c01c95057cdb874696cbfe543494c83a67573d3cb4ebf96a7bfed7
- SSDEEP 98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdS:uZHrzyG+2aDHGkS8Cg
- MD5 SHA1 SHA512 SSDEEP
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
Suspicious use of SetThreadContext