General
-
Target
0f394c3b8e22c703590f14446fca33d9_JaffaCakes118
-
Size
243KB
-
Sample
240625-xz79yaxgke
-
MD5
0f394c3b8e22c703590f14446fca33d9
-
SHA1
b1354af512ba2774b8c96ad5c42d33fa0ac11c08
-
SHA256
6b9d7be16a7b3ae02ee056bd3fe21f0f7567e7a99238ec458db966219895812f
-
SHA512
847b3e5c9bc3384f3e231da5cc9924f2be0ddedbc9bf24222fad995b11b4ede8aeef51a7675e2871923a501b21c4d5cd54bf1a6bec09c91f054aea8b1e19bc19
-
SSDEEP
6144:BH3Jh95UbcMYDd2R2G136wH/8cYZJoeX7XBsyknw3IKn3x:BH3r7UeDd2RNNHUc8JoQDVkw3IKh
Static task
static1
Behavioral task
behavioral1
Sample
0f394c3b8e22c703590f14446fca33d9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f394c3b8e22c703590f14446fca33d9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0f394c3b8e22c703590f14446fca33d9_JaffaCakes118
-
Size
243KB
-
MD5
0f394c3b8e22c703590f14446fca33d9
-
SHA1
b1354af512ba2774b8c96ad5c42d33fa0ac11c08
-
SHA256
6b9d7be16a7b3ae02ee056bd3fe21f0f7567e7a99238ec458db966219895812f
-
SHA512
847b3e5c9bc3384f3e231da5cc9924f2be0ddedbc9bf24222fad995b11b4ede8aeef51a7675e2871923a501b21c4d5cd54bf1a6bec09c91f054aea8b1e19bc19
-
SSDEEP
6144:BH3Jh95UbcMYDd2R2G136wH/8cYZJoeX7XBsyknw3IKn3x:BH3r7UeDd2RNNHUc8JoQDVkw3IKh
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Modifies WinLogon
-