General
-
Target
0ed55e327b43e67236e27df919ab7a05_JaffaCakes118
-
Size
510KB
-
Sample
240328-ysjhnsfc4v
-
MD5
0ed55e327b43e67236e27df919ab7a05
-
SHA1
a023884970e20cb0666bb2d0dfcec11581744a81
-
SHA256
eb27e1fcd17910d5e711665068887b3c443ffb6d6e87dbbdd85dc735c802bdaa
-
SHA512
e81c8096863904ccb9b77b9a4aa5d1f1973c52fb01624358f332e8eed6b9abda39a6966643a4eed6a80d4e60c16e0d42dde468c95cc7157b8ed03ffa89ca4bad
-
SSDEEP
12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFf:j/D0caF8wvhb43pDbf
Behavioral task
behavioral1
Sample
0ed55e327b43e67236e27df919ab7a05_JaffaCakes118.exe
Resource
win7-20240319-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.30.235
218.54.31.165
Targets
-
-
Target
0ed55e327b43e67236e27df919ab7a05_JaffaCakes118
-
Size
510KB
-
MD5
0ed55e327b43e67236e27df919ab7a05
-
SHA1
a023884970e20cb0666bb2d0dfcec11581744a81
-
SHA256
eb27e1fcd17910d5e711665068887b3c443ffb6d6e87dbbdd85dc735c802bdaa
-
SHA512
e81c8096863904ccb9b77b9a4aa5d1f1973c52fb01624358f332e8eed6b9abda39a6966643a4eed6a80d4e60c16e0d42dde468c95cc7157b8ed03ffa89ca4bad
-
SSDEEP
12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFf:j/D0caF8wvhb43pDbf
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-