General
- Target jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.88946a026e76132c06d4ba7f9bf5c385
- Size 139KB
- Sample261009-xth3vsty2r
- SHA256 af5628f612b8bc36a4a706a231988132baccbe439c4c618952e9d58314f01255
- MD5 88946a026e76132c06d4ba7f9bf5c385
- SHA1 202cf772fab3537231e230fb958eaacb265e3593
- SHA512 4f1fcce37d2bd8e3118e354122cd3b2ed21b17c6dab4b9ffd321909649cc0ef1954031fcf6199aa46b7c17742fcc94199004b39337642ac44be61de6be4b7d24
- SSDEEP 3072:IVePhpGzwt5ZHoGN+UDSKoUKhfC8WzrJ6QnEzpaJjFsRal4e:IAhpGkN+UxBK1C80rJ5EdSl4
- TLSH T105D37C4DE6CB8B21CD85C47575726A4AA72685300538335E79703EBA1BF3AD30B2E397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.88946a026e76132c06d4ba7f9bf5c385
- Size 139KB
- SHA256 af5628f612b8bc36a4a706a231988132baccbe439c4c618952e9d58314f01255
- MD5 88946a026e76132c06d4ba7f9bf5c385
- SHA1 202cf772fab3537231e230fb958eaacb265e3593
- SHA512 4f1fcce37d2bd8e3118e354122cd3b2ed21b17c6dab4b9ffd321909649cc0ef1954031fcf6199aa46b7c17742fcc94199004b39337642ac44be61de6be4b7d24
- SSDEEP 3072:IVePhpGzwt5ZHoGN+UDSKoUKhfC8WzrJ6QnEzpaJjFsRal4e:IAhpGkN+UxBK1C80rJ5EdSl4
- TLSH T105D37C4DE6CB8B21CD85C47575726A4AA72685300538335E79703EBA1BF3AD30B2E397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Adds policy Run key to start application
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext