General
-
Target
d0d44a15c6bdffdc2362790dcfd64772_JaffaCakes118
-
Size
249KB
-
Sample
240907-b81essygmr
-
MD5
d0d44a15c6bdffdc2362790dcfd64772
-
SHA1
0ee9cdbe49f329e76826ff6d70cb227284e28bca
-
SHA256
2085e027acfaf3f3f1ada6553f89cc69fb82191608307cb5e54487f59ca56c83
-
SHA512
125285b147d4d034370c29943c7347d4aa7ac89fc2ae1790e373a87722953a4dc26642500b435d5bbce55ac244d80f871448fb1a6226c175265e321e810501e9
-
SSDEEP
6144:0A9n5LAEgMVdzC25NgYsUWLXiAdraBCDoAc769/c:0AHL5gMVdzCeOXUQraByc769k
Static task
static1
Behavioral task
behavioral1
Sample
d0d44a15c6bdffdc2362790dcfd64772_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0d44a15c6bdffdc2362790dcfd64772_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d0d44a15c6bdffdc2362790dcfd64772_JaffaCakes118
-
Size
249KB
-
MD5
d0d44a15c6bdffdc2362790dcfd64772
-
SHA1
0ee9cdbe49f329e76826ff6d70cb227284e28bca
-
SHA256
2085e027acfaf3f3f1ada6553f89cc69fb82191608307cb5e54487f59ca56c83
-
SHA512
125285b147d4d034370c29943c7347d4aa7ac89fc2ae1790e373a87722953a4dc26642500b435d5bbce55ac244d80f871448fb1a6226c175265e321e810501e9
-
SSDEEP
6144:0A9n5LAEgMVdzC25NgYsUWLXiAdraBCDoAc769/c:0AHL5gMVdzCeOXUQraByc769k
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-