General
-
Target
ce46eb95fece1606dc284b8c04b493d2_JaffaCakes118
-
Size
274KB
-
Sample
241206-wfz9jsvqan
-
MD5
ce46eb95fece1606dc284b8c04b493d2
-
SHA1
ddf05e9185be47fa1cf11cf3d296ec66f81f6477
-
SHA256
5db97f76d33bf29c3ddabd323840e6456afd92014059b39e809575a4b6d2f290
-
SHA512
751ea1f43bab69d63151b076f4c689018743a8c5a3adcc162429718c1891de64e1c4953440eab7b5c55242f0dd2dbba0d4e4f91ae84be6e807af679e004daa16
-
SSDEEP
6144:oW95WO18EFJpK/rBjccRiyhQEl3oCXLfRTR19K4L76JDNbewMAAGy9:oAzFvc79oCbv6DJDNa+u
Static task
static1
Behavioral task
behavioral1
Sample
ce46eb95fece1606dc284b8c04b493d2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce46eb95fece1606dc284b8c04b493d2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
ce46eb95fece1606dc284b8c04b493d2_JaffaCakes118
-
Size
274KB
-
MD5
ce46eb95fece1606dc284b8c04b493d2
-
SHA1
ddf05e9185be47fa1cf11cf3d296ec66f81f6477
-
SHA256
5db97f76d33bf29c3ddabd323840e6456afd92014059b39e809575a4b6d2f290
-
SHA512
751ea1f43bab69d63151b076f4c689018743a8c5a3adcc162429718c1891de64e1c4953440eab7b5c55242f0dd2dbba0d4e4f91ae84be6e807af679e004daa16
-
SSDEEP
6144:oW95WO18EFJpK/rBjccRiyhQEl3oCXLfRTR19K4L76JDNbewMAAGy9:oAzFvc79oCbv6DJDNa+u
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-