General
-
Target
e334a3b2d9187c1c1b95a1080a4819b6_JaffaCakes118
-
Size
454KB
-
Sample
241211-zt66ssykct
-
MD5
e334a3b2d9187c1c1b95a1080a4819b6
-
SHA1
27e9d384ee66a0d483d078bca77152ecd814ec52
-
SHA256
dec5dace1bdfb490be6347de745ba489889ddceb44353106eec6f26a9b83d549
-
SHA512
d47e337675f722c02f2d4423624d4c551e2d02b86edf134af4e64cf524fceb191430c5ae64cb3f0d068b58e893eca3221d1a2b18ed11aa462353fd04c90a3a71
-
SSDEEP
12288:cO0WWftG2MG7QmPsKGCGUDSxO/D+Ya8SQZn3M:b0RfoTGEm0KGeDSxO/s8Sw8
Static task
static1
Behavioral task
behavioral1
Sample
e334a3b2d9187c1c1b95a1080a4819b6_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
e334a3b2d9187c1c1b95a1080a4819b6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
e334a3b2d9187c1c1b95a1080a4819b6_JaffaCakes118
-
Size
454KB
-
MD5
e334a3b2d9187c1c1b95a1080a4819b6
-
SHA1
27e9d384ee66a0d483d078bca77152ecd814ec52
-
SHA256
dec5dace1bdfb490be6347de745ba489889ddceb44353106eec6f26a9b83d549
-
SHA512
d47e337675f722c02f2d4423624d4c551e2d02b86edf134af4e64cf524fceb191430c5ae64cb3f0d068b58e893eca3221d1a2b18ed11aa462353fd04c90a3a71
-
SSDEEP
12288:cO0WWftG2MG7QmPsKGCGUDSxO/D+Ya8SQZn3M:b0RfoTGEm0KGeDSxO/s8Sw8
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Suspicious use of SetThreadContext
-