General
-
Target
964f1fca8a98243ef72d76ca672a6b29_JaffaCakes118
-
Size
401KB
-
Sample
240814-qwslrazcpq
-
MD5
964f1fca8a98243ef72d76ca672a6b29
-
SHA1
fd151989622d0b23c015a2bf422e63227cf79e06
-
SHA256
58d4c764eef8143bcbc448145548b6258859bd4c574cf5519fcde369abe32194
-
SHA512
618a3807718a1edb19138acf5418522b163d4fe3a5940c528d91751eab0fae2750b602af53de51f3e64528e6f79896c3d1bbabe9e881e8c8b16e4f8e92512340
-
SSDEEP
6144:E2vpXR8C9xMUWhYegAsGJk/cUrF1E10QZJ7gW6gTmC6aJseQiITqAy4a8XqMVyZ:5h8UoYegJGJkRjEDn7gi1KzzTVMMYZ
Static task
static1
Behavioral task
behavioral1
Sample
964f1fca8a98243ef72d76ca672a6b29_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
964f1fca8a98243ef72d76ca672a6b29_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
964f1fca8a98243ef72d76ca672a6b29_JaffaCakes118
-
Size
401KB
-
MD5
964f1fca8a98243ef72d76ca672a6b29
-
SHA1
fd151989622d0b23c015a2bf422e63227cf79e06
-
SHA256
58d4c764eef8143bcbc448145548b6258859bd4c574cf5519fcde369abe32194
-
SHA512
618a3807718a1edb19138acf5418522b163d4fe3a5940c528d91751eab0fae2750b602af53de51f3e64528e6f79896c3d1bbabe9e881e8c8b16e4f8e92512340
-
SSDEEP
6144:E2vpXR8C9xMUWhYegAsGJk/cUrF1E10QZJ7gW6gTmC6aJseQiITqAy4a8XqMVyZ:5h8UoYegJGJkRjEDn7gi1KzzTVMMYZ
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory
-