General
- Target jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Imali.gen.dac5fbb7a6fe18b054746dae427d77d3
- Size 2.7MB
- Sample261014-fb6b1aee44
- SHA256 462565a880f85a787503ac71a08284fb31a6dac153257845b1b2107aec95914a
- MD5 dac5fbb7a6fe18b054746dae427d77d3
- SHA1 6c2426cec23d9a4c1e287bf039eb158b4a329130
- SHA512 acac82c2a6adf0e8a8a3deaa23295773376c70e26e13e186ab020f9bce45ae414f14321b82e3bd49dd8425742757a413859a93c24072cd4e16bf7d0e1320738f
- SSDEEP 49152:lOfcsMc6EoBzTw6Gqqypj56G1LWMPFJRQ8EaI4EbN/uJyBjEt2fevm5Q:6oAoN6G1iKbW7aZQNWJyBXfevm5Q
- TLSH T1D4D51241A3D9C032E26D1974C96943F89E267C7007D350DB2FB8F91DCE766EB6839226
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Imali.gen.exe
Resource
win10v2004-20260911-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Imali.gen.exe
Resource
win11ltsc2024-20260911-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Imali.gen.dac5fbb7a6fe18b054746dae427d77d3
- Size 2.7MB
- SHA256 462565a880f85a787503ac71a08284fb31a6dac153257845b1b2107aec95914a
- MD5 dac5fbb7a6fe18b054746dae427d77d3
- SHA1 6c2426cec23d9a4c1e287bf039eb158b4a329130
- SHA512 acac82c2a6adf0e8a8a3deaa23295773376c70e26e13e186ab020f9bce45ae414f14321b82e3bd49dd8425742757a413859a93c24072cd4e16bf7d0e1320738f
- SSDEEP 49152:lOfcsMc6EoBzTw6Gqqypj56G1LWMPFJRQ8EaI4EbN/uJyBjEt2fevm5Q:6oAoN6G1iKbW7aZQNWJyBXfevm5Q
- TLSH T1D4D51241A3D9C032E26D1974C96943F89E267C7007D350DB2FB8F91DCE766EB6839226
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.