Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
10-01-2025 03:18
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d988cbabb48281eff0a39ce40631a5f9.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d988cbabb48281eff0a39ce40631a5f9.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d988cbabb48281eff0a39ce40631a5f9.exe
-
Size
127KB
-
MD5
d988cbabb48281eff0a39ce40631a5f9
-
SHA1
1ea1ad897a8e9f46de7944ff8c51776ca891dd0c
-
SHA256
8b9fcf28d37497bdc2a20529aa09f2d94d2cb7de8c2a3add83e83bde4019070b
-
SHA512
4925ed79cf418b2234846d40ae31814b6bb0c1a1cf7451b052b9d4d31a9d025529cf4d63802809787f804cbc5a64fa2c833dc26f710db337a2c842c3bfd8ec3c
-
SSDEEP
1536:/dYrLqjif7PpYbxv8jryIAyFcRtcORUknh3uJp+Q7Jgz70HFcZeA1z:/SvqjSlSsroy+RtcORUk9qfPHeZn1z
Malware Config
Extracted
smokeloader
pub2
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
Smokeloader family