General
-
Target
f18e922a5903e460a0d6cfae59ca27b4_JaffaCakes118
-
Size
1.0MB
-
Sample
241215-bc823azjg1
-
MD5
f18e922a5903e460a0d6cfae59ca27b4
-
SHA1
9193745d818d746d710c4c40847c52e295cc218e
-
SHA256
bdd82499ce22f70a9d9e95a9a9f523c7af911706a0ba68d072a90b63f1792aab
-
SHA512
fabf313db980e95cac9688ed40c5718f06a4d3a94ee4e1ee30691d4bd5a72a9deef9a2a740d061597af270b2eba0a482e605ffee8d02ee3036f6164bdefea1d8
-
SSDEEP
12288:/ZglhUPonsXoNQTkcpqQcj6s3Rkra8t+qHeQTc:/ZglhRqJkoqQK6dXHea
Behavioral task
behavioral1
Sample
f18e922a5903e460a0d6cfae59ca27b4_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f18e922a5903e460a0d6cfae59ca27b4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Targets
-
-
Target
f18e922a5903e460a0d6cfae59ca27b4_JaffaCakes118
-
Size
1.0MB
-
MD5
f18e922a5903e460a0d6cfae59ca27b4
-
SHA1
9193745d818d746d710c4c40847c52e295cc218e
-
SHA256
bdd82499ce22f70a9d9e95a9a9f523c7af911706a0ba68d072a90b63f1792aab
-
SHA512
fabf313db980e95cac9688ed40c5718f06a4d3a94ee4e1ee30691d4bd5a72a9deef9a2a740d061597af270b2eba0a482e605ffee8d02ee3036f6164bdefea1d8
-
SSDEEP
12288:/ZglhUPonsXoNQTkcpqQcj6s3Rkra8t+qHeQTc:/ZglhRqJkoqQK6dXHea
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-