Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 17:05
Static task
static1
Behavioral task
behavioral1
Sample
ea7b98ee1dd05c2fbcf93eafc54f1b59_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea7b98ee1dd05c2fbcf93eafc54f1b59_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea7b98ee1dd05c2fbcf93eafc54f1b59_JaffaCakes118.exe
-
Size
72KB
-
MD5
ea7b98ee1dd05c2fbcf93eafc54f1b59
-
SHA1
8bfd03283534afa15c3908fd2f2c6a547e79e346
-
SHA256
53cdabbc2967cc5abc4b88c66f8cc5b60502befdb65421829726e546cb4bcc6b
-
SHA512
b3feea4073eecba303e1a440adf7c088fefcc47bc32f148e5564f6ba708cb03d4eb9fd92de0b5ddf009fe12c0be93693486509aa133a2e1cf06d36ee82911785
-
SSDEEP
768:JAfGEH6SorySevjh1V3P7Zsp1EXHi9797gSyT:XEH6SorxQj/x1WMHi0
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation ea7b98ee1dd05c2fbcf93eafc54f1b59_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).