General
-
Target
b8995a04d53c2da3b673410c492dd664_JaffaCakes118
-
Size
15.9MB
-
Sample
240404-pwlmrsgd77
-
MD5
b8995a04d53c2da3b673410c492dd664
-
SHA1
7e71194620396f257d9b7f3be88d08d6e0f69898
-
SHA256
cfa14e3aa7cfc2dd4a3dbe6a4ff326c6ae5fc1a82f249483b59b355cb96b9af4
-
SHA512
e61e1b49da5dd4de950664ae8e1da08054a208a014069992d034b506fd6995290d780605b643672989ab0e98796a2701642a9fa136f9aea2d5a3e0dce6ce950b
-
SSDEEP
393216:1g7uDg7uDg7uDg7uDg7uDg7uDg7uDg7uN:+SkSkSkSkSkSkSkSN
Static task
static1
Behavioral task
behavioral1
Sample
b8995a04d53c2da3b673410c492dd664_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8995a04d53c2da3b673410c492dd664_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
b8995a04d53c2da3b673410c492dd664_JaffaCakes118
-
Size
15.9MB
-
MD5
b8995a04d53c2da3b673410c492dd664
-
SHA1
7e71194620396f257d9b7f3be88d08d6e0f69898
-
SHA256
cfa14e3aa7cfc2dd4a3dbe6a4ff326c6ae5fc1a82f249483b59b355cb96b9af4
-
SHA512
e61e1b49da5dd4de950664ae8e1da08054a208a014069992d034b506fd6995290d780605b643672989ab0e98796a2701642a9fa136f9aea2d5a3e0dce6ce950b
-
SSDEEP
393216:1g7uDg7uDg7uDg7uDg7uDg7uDg7uDg7uN:+SkSkSkSkSkSkSkSN
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-