General
-
Target
1d387e8fdc34aa18e48e94f63944b525_JaffaCakes118
-
Size
137KB
-
Sample
240329-j9b3ladh23
-
MD5
1d387e8fdc34aa18e48e94f63944b525
-
SHA1
73b081ce4e58cf632de3e28741cbfb4e191aeb6d
-
SHA256
5e3516f802661bc84ff560a04d6d2bdd7e5051bcf168b15625e88c951ffe975a
-
SHA512
7ec526399943712d1007e96766c7dbb916abc86044563ada3d614f37871212e5a6f513599bc43e7eeb8272fc92a844b317d765796f657af141de6beb9fe89588
-
SSDEEP
1536:s1baYkjUIKECOmxUNKwhB+GT/4I2fm3w9Rri+pXmf8t1dn4vcjeRVW:sjIKn1xUswhsGTgI23RGUXmUDd
Static task
static1
Behavioral task
behavioral1
Sample
1d387e8fdc34aa18e48e94f63944b525_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
1d387e8fdc34aa18e48e94f63944b525_JaffaCakes118
-
Size
137KB
-
MD5
1d387e8fdc34aa18e48e94f63944b525
-
SHA1
73b081ce4e58cf632de3e28741cbfb4e191aeb6d
-
SHA256
5e3516f802661bc84ff560a04d6d2bdd7e5051bcf168b15625e88c951ffe975a
-
SHA512
7ec526399943712d1007e96766c7dbb916abc86044563ada3d614f37871212e5a6f513599bc43e7eeb8272fc92a844b317d765796f657af141de6beb9fe89588
-
SSDEEP
1536:s1baYkjUIKECOmxUNKwhB+GT/4I2fm3w9Rri+pXmf8t1dn4vcjeRVW:sjIKn1xUswhsGTgI23RGUXmUDd
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-