General
-
Target
8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118
-
Size
107KB
-
Sample
241104-fs3mfatlh1
-
MD5
8f4f52279db3eedc7cdaa1f229ebb91d
-
SHA1
2c06ca94a692863099d6bf5db6e8af26ee72d53f
-
SHA256
06bde76b1a6b1627f2aa82fb5fb7f756edce32519607c4d6b9108b1bf6412401
-
SHA512
dc219c1f01eb2baf79b92ebb500204a742d97e2b0963bc4f37424d63d594c555732921f6151905d2c9b319274b27bf2e0ff719cbfe894517603e0e83f33a1f7f
-
SSDEEP
3072:FqTn4EsPVigXmTEKDfx6wW86PT3GMWvji:sTnoV1XmTEoQIzj
Static task
static1
Behavioral task
behavioral1
Sample
8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118
-
Size
107KB
-
MD5
8f4f52279db3eedc7cdaa1f229ebb91d
-
SHA1
2c06ca94a692863099d6bf5db6e8af26ee72d53f
-
SHA256
06bde76b1a6b1627f2aa82fb5fb7f756edce32519607c4d6b9108b1bf6412401
-
SHA512
dc219c1f01eb2baf79b92ebb500204a742d97e2b0963bc4f37424d63d594c555732921f6151905d2c9b319274b27bf2e0ff719cbfe894517603e0e83f33a1f7f
-
SSDEEP
3072:FqTn4EsPVigXmTEKDfx6wW86PT3GMWvji:sTnoV1XmTEoQIzj
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-