General
-
Target
518c295dd4bc20e300c2bf5fe3bd540a_JaffaCakes118
-
Size
262KB
-
Sample
240717-fnh28swhjr
-
MD5
518c295dd4bc20e300c2bf5fe3bd540a
-
SHA1
845c6ddc19e0dad406a3cd96cb416080d196989d
-
SHA256
aff31cff567948ba4ae2144bbcc562a4d3ab115f7e8b00482414b81ebf40a543
-
SHA512
02ca9a41141c31a205c2f3ea4782d3135910aaa7434dd87a3d8b4866b889873aa00fe5449fea782641a74fd5edc9433303b9e4c7b8f49b0f4997ede7a41f9217
-
SSDEEP
6144:758Gp+df0afmVTRMdwdpn94sLrNXel9ibb98+MAAD:F8YkfXf4TRME94svNuzibb9Z+
Static task
static1
Behavioral task
behavioral1
Sample
518c295dd4bc20e300c2bf5fe3bd540a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
518c295dd4bc20e300c2bf5fe3bd540a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
518c295dd4bc20e300c2bf5fe3bd540a_JaffaCakes118
-
Size
262KB
-
MD5
518c295dd4bc20e300c2bf5fe3bd540a
-
SHA1
845c6ddc19e0dad406a3cd96cb416080d196989d
-
SHA256
aff31cff567948ba4ae2144bbcc562a4d3ab115f7e8b00482414b81ebf40a543
-
SHA512
02ca9a41141c31a205c2f3ea4782d3135910aaa7434dd87a3d8b4866b889873aa00fe5449fea782641a74fd5edc9433303b9e4c7b8f49b0f4997ede7a41f9217
-
SSDEEP
6144:758Gp+df0afmVTRMdwdpn94sLrNXel9ibb98+MAAD:F8YkfXf4TRME94svNuzibb9Z+
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-