General
-
Target
f88ea9233fec35960bbb4feeabcff945_JaffaCakes118
-
Size
137KB
-
Sample
240926-rpypvs1gnn
-
MD5
f88ea9233fec35960bbb4feeabcff945
-
SHA1
c28c78118273d41865321b9904fccd820b18bb53
-
SHA256
61aa531af8b25f9f62027debbc860e4d18a7fe9a4f7744a7d596c32b94ba2699
-
SHA512
7c930e5c5fdd6669611a45a378ee5467d5b5d947d61c6201a7b21f926d53c9bc1a05554eb139c4a024e675acbbab8ea7e557b7e01aa0dd8d4a9fb15fc6d73f4a
-
SSDEEP
3072:lghyf/VUpgyY9xhGhy3otLz/a+sjBriJFyokBfpzbh+C2oQCZv6:WCSgJ9xhG2Ya+G2yoW9bhrr3B6
Static task
static1
Behavioral task
behavioral1
Sample
f88ea9233fec35960bbb4feeabcff945_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f88ea9233fec35960bbb4feeabcff945_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
f88ea9233fec35960bbb4feeabcff945_JaffaCakes118
-
Size
137KB
-
MD5
f88ea9233fec35960bbb4feeabcff945
-
SHA1
c28c78118273d41865321b9904fccd820b18bb53
-
SHA256
61aa531af8b25f9f62027debbc860e4d18a7fe9a4f7744a7d596c32b94ba2699
-
SHA512
7c930e5c5fdd6669611a45a378ee5467d5b5d947d61c6201a7b21f926d53c9bc1a05554eb139c4a024e675acbbab8ea7e557b7e01aa0dd8d4a9fb15fc6d73f4a
-
SSDEEP
3072:lghyf/VUpgyY9xhGhy3otLz/a+sjBriJFyokBfpzbh+C2oQCZv6:WCSgJ9xhG2Ya+G2yoW9bhrr3B6
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-