General
-
Target
a3df6c39dcb214d9c5b1854c55466d35_JaffaCakes118
-
Size
1.0MB
-
Sample
240613-fgasaayclm
-
MD5
a3df6c39dcb214d9c5b1854c55466d35
-
SHA1
de087fc31dbd6adc923340e2af711865c838bf27
-
SHA256
e306027e9e77479e4ba3a36ff05ea3c243e0e7dff514c57064fb77ec846f2b87
-
SHA512
98e4f93055c1941f4022a981e5d490696d2d21ef81fd45f5031fec25ca4b284d24d852000ddc69cc10f79f3a0c6de080ac7589de11a6c09c13612e3c620a7973
-
SSDEEP
24576:hZeiMPQGKBS8p3Tf0fRvBIJnALR3uoEfq+R0s:nePQnff0fRqEZvXZs
Static task
static1
Behavioral task
behavioral1
Sample
a3df6c39dcb214d9c5b1854c55466d35_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a3df6c39dcb214d9c5b1854c55466d35_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
a3df6c39dcb214d9c5b1854c55466d35_JaffaCakes118
-
Size
1.0MB
-
MD5
a3df6c39dcb214d9c5b1854c55466d35
-
SHA1
de087fc31dbd6adc923340e2af711865c838bf27
-
SHA256
e306027e9e77479e4ba3a36ff05ea3c243e0e7dff514c57064fb77ec846f2b87
-
SHA512
98e4f93055c1941f4022a981e5d490696d2d21ef81fd45f5031fec25ca4b284d24d852000ddc69cc10f79f3a0c6de080ac7589de11a6c09c13612e3c620a7973
-
SSDEEP
24576:hZeiMPQGKBS8p3Tf0fRvBIJnALR3uoEfq+R0s:nePQnff0fRqEZvXZs
Score7/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-