General
-
Target
94cb18098d05da7483ca553db7e0e177_JaffaCakes118
-
Size
457KB
-
Sample
241124-p5dzaawren
-
MD5
94cb18098d05da7483ca553db7e0e177
-
SHA1
1a81285f2dc96bf0881e3e9bb919d437a96a5ba4
-
SHA256
a339d8b5036c80bb755fc4c78ef97d3cd849692a6dbd5b825b001dd1bd4878bf
-
SHA512
635af6c0a6bf0e54579f1678623b85a1d1c537d57425ba5f4f764a9f0e72343f69b4a112e6953e22a0286686af560df76bc1b77991130104a31e717e63627ead
-
SSDEEP
12288:UQPA6krEJBqWNtDjLcnKNalKv1V0pjq1GBs:UQ0WNtD/qzAP0Nq1
Behavioral task
behavioral1
Sample
94cb18098d05da7483ca553db7e0e177_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
94cb18098d05da7483ca553db7e0e177_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
94cb18098d05da7483ca553db7e0e177_JaffaCakes118
-
Size
457KB
-
MD5
94cb18098d05da7483ca553db7e0e177
-
SHA1
1a81285f2dc96bf0881e3e9bb919d437a96a5ba4
-
SHA256
a339d8b5036c80bb755fc4c78ef97d3cd849692a6dbd5b825b001dd1bd4878bf
-
SHA512
635af6c0a6bf0e54579f1678623b85a1d1c537d57425ba5f4f764a9f0e72343f69b4a112e6953e22a0286686af560df76bc1b77991130104a31e717e63627ead
-
SSDEEP
12288:UQPA6krEJBqWNtDjLcnKNalKv1V0pjq1GBs:UQ0WNtD/qzAP0Nq1
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-