General
-
Target
f032eebe986f310326283b4954d1bfb1_JaffaCakes118
-
Size
69KB
-
Sample
241214-xj4a2sspej
-
MD5
f032eebe986f310326283b4954d1bfb1
-
SHA1
11533bd4162a1de7f1d1dc346e5dca36cafc8823
-
SHA256
f497a8c3e542d45820aabfe805c584b4e24408cab58ae83e137d993cbb9aab3e
-
SHA512
859df7be9042458f912fbfe25bc33448330cf0778b4390d4e1f0ce015a580197d97eae547f33c21c69c41354e380a64b84f8a64cd79b9fc514d72b424f98c7b0
-
SSDEEP
1536:STEKV+zoxoXIy7GArumtE6/3Rvs93P9l5geRsO7rg:SBQzoxCv7ZtE6/RE9l9Js
Static task
static1
Behavioral task
behavioral1
Sample
f032eebe986f310326283b4954d1bfb1_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f032eebe986f310326283b4954d1bfb1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
f032eebe986f310326283b4954d1bfb1_JaffaCakes118
-
Size
69KB
-
MD5
f032eebe986f310326283b4954d1bfb1
-
SHA1
11533bd4162a1de7f1d1dc346e5dca36cafc8823
-
SHA256
f497a8c3e542d45820aabfe805c584b4e24408cab58ae83e137d993cbb9aab3e
-
SHA512
859df7be9042458f912fbfe25bc33448330cf0778b4390d4e1f0ce015a580197d97eae547f33c21c69c41354e380a64b84f8a64cd79b9fc514d72b424f98c7b0
-
SSDEEP
1536:STEKV+zoxoXIy7GArumtE6/3Rvs93P9l5geRsO7rg:SBQzoxCv7ZtE6/RE9l9Js
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Suspicious use of SetThreadContext
-