General
- Target 34fad272d93869996f0827b4f45e3fdb_JaffaCakes118
- Size 171KB
- Sample240710-q4ysqstepa
- SHA256 538fa0fa328bf474da6f8dc057b3d17049a50a32bf75703fc69f3e19c58d2e45
- MD5 34fad272d93869996f0827b4f45e3fdb
- SHA1 c923f35909ca0ac9a374c9036c0590a0477d7b0b
- SHA512 f91d8c3b0d8deda0d86657856b5a18ead88edc01256d37b7aaf75d5b4e85f273690e3ef5f0501ae4d773d77e35f6b150b4b0efe81be05030e05d3a4e8ba67ece
- SSDEEP 3072:s6G3gsujuKgaxBLg1RjM5TBZLOGcImEUbQeLi9f0tJjNQWiS0fw/rSIS:W3utgaxLlzh1mLMemaZSWiS0fwTSD
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
34fad272d93869996f0827b4f45e3fdb_JaffaCakes118.exe
Resource
win7-20240705-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
34fad272d93869996f0827b4f45e3fdb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 34fad272d93869996f0827b4f45e3fdb_JaffaCakes118
- Size 171KB
- SHA256 538fa0fa328bf474da6f8dc057b3d17049a50a32bf75703fc69f3e19c58d2e45
- MD5 34fad272d93869996f0827b4f45e3fdb
- SHA1 c923f35909ca0ac9a374c9036c0590a0477d7b0b
- SHA512 f91d8c3b0d8deda0d86657856b5a18ead88edc01256d37b7aaf75d5b4e85f273690e3ef5f0501ae4d773d77e35f6b150b4b0efe81be05030e05d3a4e8ba67ece
- SSDEEP 3072:s6G3gsujuKgaxBLg1RjM5TBZLOGcImEUbQeLi9f0tJjNQWiS0fw/rSIS:W3utgaxLlzh1mLMemaZSWiS0fwTSD
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Adds Run key to start application
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext