General
-
Target
fb22a399994f0ffa43ddc8228d4bd5f7_JaffaCakes118
-
Size
96KB
-
Sample
240927-3zd9raydqf
-
MD5
fb22a399994f0ffa43ddc8228d4bd5f7
-
SHA1
391503a47e20ab4eeb9427638ddcd9fcb46be341
-
SHA256
ba69b44766436aa5dbd83711b7fbdeb2c5c3faf8350f99626dc4460222c94f36
-
SHA512
9dd74784866080656050310076628620175107228fcb058118e0332fd7a4e94c38d87bdd7a9f82dcc3e559faeee1dea7ad1f478a915b5bd84f8a8e029a9493bd
-
SSDEEP
768:veZZKvtZ0SvvaJSOSwPxJQkCTqER8EoK9k+pr1wUftpq:mZZKv3UOeJQkCeERkK9kH
Static task
static1
Behavioral task
behavioral1
Sample
fb22a399994f0ffa43ddc8228d4bd5f7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb22a399994f0ffa43ddc8228d4bd5f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
guloader
https://tucompraperfecta.com/bin_encrypted_F8CB27F.bin
Targets
-
-
Target
fb22a399994f0ffa43ddc8228d4bd5f7_JaffaCakes118
-
Size
96KB
-
MD5
fb22a399994f0ffa43ddc8228d4bd5f7
-
SHA1
391503a47e20ab4eeb9427638ddcd9fcb46be341
-
SHA256
ba69b44766436aa5dbd83711b7fbdeb2c5c3faf8350f99626dc4460222c94f36
-
SHA512
9dd74784866080656050310076628620175107228fcb058118e0332fd7a4e94c38d87bdd7a9f82dcc3e559faeee1dea7ad1f478a915b5bd84f8a8e029a9493bd
-
SSDEEP
768:veZZKvtZ0SvvaJSOSwPxJQkCTqER8EoK9k+pr1wUftpq:mZZKv3UOeJQkCeERkK9kH
Score10/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-