General
-
Target
a78b17bf904841a38d7cab4c254a6b1b_JaffaCakes118
-
Size
3.8MB
-
Sample
240614-bw7ckszdpb
-
MD5
a78b17bf904841a38d7cab4c254a6b1b
-
SHA1
51002ea39262837c2ca7f3e7a2582c60cb3a9e13
-
SHA256
7fd3bdb65ae39b86c5f1905b16f5bbfd50bce7299ce3bb451e2e31f4e9d287f1
-
SHA512
97c6968903731a6e258804d394593b0bb4963ba86e18cd15a7372710da746c51ed6c9f7b941e74e2044d74dfd76bccd7201008fafacfbb476fbc6182a3e920ab
-
SSDEEP
98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdK:uZHrzyG+2aDHGkS8Co
Behavioral task
behavioral1
Sample
a78b17bf904841a38d7cab4c254a6b1b_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Targets
-
-
Target
a78b17bf904841a38d7cab4c254a6b1b_JaffaCakes118
-
Size
3.8MB
-
MD5
a78b17bf904841a38d7cab4c254a6b1b
-
SHA1
51002ea39262837c2ca7f3e7a2582c60cb3a9e13
-
SHA256
7fd3bdb65ae39b86c5f1905b16f5bbfd50bce7299ce3bb451e2e31f4e9d287f1
-
SHA512
97c6968903731a6e258804d394593b0bb4963ba86e18cd15a7372710da746c51ed6c9f7b941e74e2044d74dfd76bccd7201008fafacfbb476fbc6182a3e920ab
-
SSDEEP
98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdK:uZHrzyG+2aDHGkS8Co
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-