General
-
Target
4aa0332dbe9c56d15001510ea862e059_JaffaCakes118
-
Size
41KB
-
Sample
240715-vrvb1atcrg
-
MD5
4aa0332dbe9c56d15001510ea862e059
-
SHA1
26a2c92afc32d657692ebddbbb72917ec89b495a
-
SHA256
4365cda4dbf0e552d078c515cfd4451b544112b6bfdc7a0e0ba38a7869c12138
-
SHA512
59a11c05445a2af02ef9830f95ee7d05f7ea964205548cdf694edfcb9c38d42fb7ed41001c7fc3bce801ac4686769c89a25f18f2d8bc93d763f00fd6965cc9c0
-
SSDEEP
768:Bi6MbK0BYoGfqCZlySRO2woK/Z6YIhoFtQjXyEJvc8JzKZr12qhZhXq:cJWoYnqCjao/HzxCQzKZrYq5Xq
Static task
static1
Behavioral task
behavioral1
Sample
4aa0332dbe9c56d15001510ea862e059_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4aa0332dbe9c56d15001510ea862e059_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
4aa0332dbe9c56d15001510ea862e059_JaffaCakes118
-
Size
41KB
-
MD5
4aa0332dbe9c56d15001510ea862e059
-
SHA1
26a2c92afc32d657692ebddbbb72917ec89b495a
-
SHA256
4365cda4dbf0e552d078c515cfd4451b544112b6bfdc7a0e0ba38a7869c12138
-
SHA512
59a11c05445a2af02ef9830f95ee7d05f7ea964205548cdf694edfcb9c38d42fb7ed41001c7fc3bce801ac4686769c89a25f18f2d8bc93d763f00fd6965cc9c0
-
SSDEEP
768:Bi6MbK0BYoGfqCZlySRO2woK/Z6YIhoFtQjXyEJvc8JzKZr12qhZhXq:cJWoYnqCjao/HzxCQzKZrYq5Xq
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious use of SetThreadContext
-