General
- Target 7e77bb853d227e06b635e6eb3e0b31f0_JaffaCakes118
- Size 843KB
- Sample240801-adkv7a1app
- SHA256 385f0a0ccaec6272c8270f0d5228f2641cca916e84825ebb35dbebb036fa2165
- MD5 7e77bb853d227e06b635e6eb3e0b31f0
- SHA1 638759be4cbb014f56f143d111535e900224e4cb
- SHA512 83a78c0c76f5b49ae7962fe99f9332c92d3b424c3aa9f658d4cf61af68aa42151bdfca3c0e452fdfc579794d2a9b86f1316e8c3f6c34c98c31d43bf1a922113e
- SSDEEP 24576:y7hRoFHVEIUHWeRCEKgTOvU5/AX1N6Qth4ct1n:i1Id2KrvU4mcbn
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7e77bb853d227e06b635e6eb3e0b31f0_JaffaCakes118.exe
Resource
win7-20240708-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 7e77bb853d227e06b635e6eb3e0b31f0_JaffaCakes118
- Size 843KB
- SHA256 385f0a0ccaec6272c8270f0d5228f2641cca916e84825ebb35dbebb036fa2165
- MD5 7e77bb853d227e06b635e6eb3e0b31f0
- SHA1 638759be4cbb014f56f143d111535e900224e4cb
- SHA512 83a78c0c76f5b49ae7962fe99f9332c92d3b424c3aa9f658d4cf61af68aa42151bdfca3c0e452fdfc579794d2a9b86f1316e8c3f6c34c98c31d43bf1a922113e
- SSDEEP 24576:y7hRoFHVEIUHWeRCEKgTOvU5/AX1N6Qth4ct1n:i1Id2KrvU4mcbn
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Uses Tor communications
Malware can proxy its traffic through Tor for more anonymity.