General
-
Target
d13152917c0707af6725699cdbdbe9ca_JaffaCakes118
-
Size
94KB
-
Sample
240907-gayffaxdnm
-
MD5
d13152917c0707af6725699cdbdbe9ca
-
SHA1
a312a91701ec5bc62ff6e3312d29172328253264
-
SHA256
7b14187978517b0b844af26590aabda8e0e35ec673c4314538ac837385945cdd
-
SHA512
b194e8a174301e91932ec8789c12bbac3073ba4f9b45e89cb0b9297ae081f3d77c5520ad420b915f276be24697de038e76c09631dcc9effc98f3d55e6372aec1
-
SSDEEP
1536:XLaEeMA2CNkm0XU4ZX4eFuZwaR4mm2ntGwizYXgTO3FV6IDQ/ABbr:cMA5kPXwEGGm7tVdGOVV6cV
Static task
static1
Behavioral task
behavioral1
Sample
d13152917c0707af6725699cdbdbe9ca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d13152917c0707af6725699cdbdbe9ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
d13152917c0707af6725699cdbdbe9ca_JaffaCakes118
-
Size
94KB
-
MD5
d13152917c0707af6725699cdbdbe9ca
-
SHA1
a312a91701ec5bc62ff6e3312d29172328253264
-
SHA256
7b14187978517b0b844af26590aabda8e0e35ec673c4314538ac837385945cdd
-
SHA512
b194e8a174301e91932ec8789c12bbac3073ba4f9b45e89cb0b9297ae081f3d77c5520ad420b915f276be24697de038e76c09631dcc9effc98f3d55e6372aec1
-
SSDEEP
1536:XLaEeMA2CNkm0XU4ZX4eFuZwaR4mm2ntGwizYXgTO3FV6IDQ/ABbr:cMA5kPXwEGGm7tVdGOVV6cV
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Suspicious use of SetThreadContext
-