Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
11-01-2025 04:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JaffaCakes118_f762e5f3316af686ea906f77787e9a1d.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
JaffaCakes118_f762e5f3316af686ea906f77787e9a1d.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
General
-
Target
JaffaCakes118_f762e5f3316af686ea906f77787e9a1d.exe
-
Size
232KB
-
MD5
f762e5f3316af686ea906f77787e9a1d
-
SHA1
09e60c8af577d5753121254663b85bbb7dfc638f
-
SHA256
557e0a9b0fd9c188589502ef21bea156733ad1bfead7551939e03b4412e2688d
-
SHA512
e49f1fdb55dbf9aec94ac581746adcd74ae99ee3698a49c377b8d7c2016662c90b89e3d8bb5494e7e5a95d073c35b4829fdc6cb896645de15488bcabb46f4a33
-
SSDEEP
6144:sXDBpNz1EJX7trLqX7tNfVXVHQLIiu8c:sXvNz1ixLwZGEX8c
Score
10/10
Malware Config
Extracted
Family
smokeloader
Botnet
pub5
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
Smokeloader family