General
-
Target
d152f795831e14c8b3dac6492e7b86b8_JaffaCakes118
-
Size
121KB
-
Sample
241207-jhjclaylcq
-
MD5
d152f795831e14c8b3dac6492e7b86b8
-
SHA1
9abf705d8de2bbadaad787346dd45015bc7a1c6d
-
SHA256
989331caf8c55a9fc07e714b10ec341059fd2ff81f167176c76630adfc6879ec
-
SHA512
91b4b71c5f9a9700154a87047a8dd5cde2dd6dd4b435dc4723ec296bfa077ea462166ad16d6c2c1743643805a3e2d411c90d41f4001bf8188a94e8f610d9ba17
-
SSDEEP
1536:/NepKVjBSOfo6RfbSkbH/xBe45waqQ3P1CzclX6WwngvQrzuGOiNvOg:lepYdfoyS+99jkzU6RC4zFOiNGg
Static task
static1
Behavioral task
behavioral1
Sample
d152f795831e14c8b3dac6492e7b86b8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d152f795831e14c8b3dac6492e7b86b8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
d152f795831e14c8b3dac6492e7b86b8_JaffaCakes118
-
Size
121KB
-
MD5
d152f795831e14c8b3dac6492e7b86b8
-
SHA1
9abf705d8de2bbadaad787346dd45015bc7a1c6d
-
SHA256
989331caf8c55a9fc07e714b10ec341059fd2ff81f167176c76630adfc6879ec
-
SHA512
91b4b71c5f9a9700154a87047a8dd5cde2dd6dd4b435dc4723ec296bfa077ea462166ad16d6c2c1743643805a3e2d411c90d41f4001bf8188a94e8f610d9ba17
-
SSDEEP
1536:/NepKVjBSOfo6RfbSkbH/xBe45waqQ3P1CzclX6WwngvQrzuGOiNvOg:lepYdfoyS+99jkzU6RC4zFOiNGg
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Suspicious use of SetThreadContext
-