General
-
Target
d5da8784f941ce8377fbefa81cd91045_JaffaCakes118
-
Size
621KB
-
Sample
240405-rfh8taee54
-
MD5
d5da8784f941ce8377fbefa81cd91045
-
SHA1
9bb51a2a33858ee8d2c0fcffe78719ed420023f7
-
SHA256
f536d08443317d9295d8c9121a5ca170555f5e262e9f0ff04eca40e7d6c72ae3
-
SHA512
94e53ccc8eca22b99d683835eedea2346265531d96ac12c353af4546574f3872856c67f679337554872e99798d33c368c8655817b7923f474f71b9606056ea8e
-
SSDEEP
6144:imbmLppYOuakYGWV5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXWy9:ima6idv8zzkGHVqoq/gKWo
Behavioral task
behavioral1
Sample
d5da8784f941ce8377fbefa81cd91045_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
d5da8784f941ce8377fbefa81cd91045_JaffaCakes118
-
Size
621KB
-
MD5
d5da8784f941ce8377fbefa81cd91045
-
SHA1
9bb51a2a33858ee8d2c0fcffe78719ed420023f7
-
SHA256
f536d08443317d9295d8c9121a5ca170555f5e262e9f0ff04eca40e7d6c72ae3
-
SHA512
94e53ccc8eca22b99d683835eedea2346265531d96ac12c353af4546574f3872856c67f679337554872e99798d33c368c8655817b7923f474f71b9606056ea8e
-
SSDEEP
6144:imbmLppYOuakYGWV5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXWy9:ima6idv8zzkGHVqoq/gKWo
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-