General
-
Target
fe84dd09b34695915a8d1afea621a2b9_JaffaCakes118
-
Size
326KB
-
Sample
240929-pkrdwathmr
-
MD5
fe84dd09b34695915a8d1afea621a2b9
-
SHA1
001afa53bdad721c0df2ff06eb3a7fb60fd6887b
-
SHA256
d563ff8098a1222e2bcb2eebd5bb68770214475542ae565e0a149c793c758419
-
SHA512
dbef366a782a0ee6eba000b4bf9efcdaa321f1ac4fcf0f26d16d218d8c8fbce2703dc532d135323a62c34024dd1c11a98485785552dc511a75f8acbfc9d2d1b3
-
SSDEEP
6144:AawBiN/PMV5Mk603Gz6+EqM+6YkkhAmiRe2TrFdIH5Iuau/xlODBZEorPsiVFqSt:AfVV5MREqMt9moekzweuaQgNsgcSO5rE
Static task
static1
Behavioral task
behavioral1
Sample
fe84dd09b34695915a8d1afea621a2b9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe84dd09b34695915a8d1afea621a2b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fe84dd09b34695915a8d1afea621a2b9_JaffaCakes118
-
Size
326KB
-
MD5
fe84dd09b34695915a8d1afea621a2b9
-
SHA1
001afa53bdad721c0df2ff06eb3a7fb60fd6887b
-
SHA256
d563ff8098a1222e2bcb2eebd5bb68770214475542ae565e0a149c793c758419
-
SHA512
dbef366a782a0ee6eba000b4bf9efcdaa321f1ac4fcf0f26d16d218d8c8fbce2703dc532d135323a62c34024dd1c11a98485785552dc511a75f8acbfc9d2d1b3
-
SSDEEP
6144:AawBiN/PMV5Mk603Gz6+EqM+6YkkhAmiRe2TrFdIH5Iuau/xlODBZEorPsiVFqSt:AfVV5MREqMt9moekzweuaQgNsgcSO5rE
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory
-