General

  • Target

    46e1d65e779b191aa7a0d1d7a53a3a48_JaffaCakes118

  • Size

    292KB

  • Sample

    240714-wfyeystdlf

  • MD5

    46e1d65e779b191aa7a0d1d7a53a3a48

  • SHA1

    cf3086be9bc35fe7ee0bd4d5b8a44342989e7d3f

  • SHA256

    d5196d72704dfb7d0ced8f30318502a77f4f558bab6845dcea0e64e6342c67bc

  • SHA512

    ae123169f9f2d0f0d39f750c4a5280801ee73e1e4c10aab775fc7dd2434dbd3f1a689812621b5d43091eaa70ff3e3a9b9ac9a216c2bf3b813070f106cb86b076

  • SSDEEP

    6144:bOKduSp/kmVBZ4NrNFo0ONEQAmgGU5lK2Qmn1ByyicqXLV:bHdN/hIlONEQAxGYc2vpcV

Score
7/10

Malware Config

Targets

    • Target

      46e1d65e779b191aa7a0d1d7a53a3a48_JaffaCakes118

    • Size

      292KB

    • MD5

      46e1d65e779b191aa7a0d1d7a53a3a48

    • SHA1

      cf3086be9bc35fe7ee0bd4d5b8a44342989e7d3f

    • SHA256

      d5196d72704dfb7d0ced8f30318502a77f4f558bab6845dcea0e64e6342c67bc

    • SHA512

      ae123169f9f2d0f0d39f750c4a5280801ee73e1e4c10aab775fc7dd2434dbd3f1a689812621b5d43091eaa70ff3e3a9b9ac9a216c2bf3b813070f106cb86b076

    • SSDEEP

      6144:bOKduSp/kmVBZ4NrNFo0ONEQAmgGU5lK2Qmn1ByyicqXLV:bHdN/hIlONEQAxGYc2vpcV

    Score
    7/10
    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks