General
-
Target
ec299fa49af887b8048fffe0c7ff7d81_JaffaCakes118
-
Size
1.0MB
-
Sample
240410-2tdklagf9s
-
MD5
ec299fa49af887b8048fffe0c7ff7d81
-
SHA1
1cb8dea56ccf3217ded89686ef2bde37d4ef4521
-
SHA256
37c843ef0e40cdbd97720c992bed22a44b9a193727d9b2be81df6519e194cb51
-
SHA512
20e9e1425b3620c350f56fb983b0cf12aff9348a4a5ff2a57e27ebc4c6fb48119a9f5b96bf348d0927af4332a93c635e02aeec89eaa10d9bae25bf0a465daca2
-
SSDEEP
24576:NFE//Tct4bOsCVyyY3V8ZlxTUrMoPBtTODouN8my+:HSVCMHOZmMOYou7d
Behavioral task
behavioral1
Sample
ec299fa49af887b8048fffe0c7ff7d81_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec299fa49af887b8048fffe0c7ff7d81_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ec299fa49af887b8048fffe0c7ff7d81_JaffaCakes118
-
Size
1.0MB
-
MD5
ec299fa49af887b8048fffe0c7ff7d81
-
SHA1
1cb8dea56ccf3217ded89686ef2bde37d4ef4521
-
SHA256
37c843ef0e40cdbd97720c992bed22a44b9a193727d9b2be81df6519e194cb51
-
SHA512
20e9e1425b3620c350f56fb983b0cf12aff9348a4a5ff2a57e27ebc4c6fb48119a9f5b96bf348d0927af4332a93c635e02aeec89eaa10d9bae25bf0a465daca2
-
SSDEEP
24576:NFE//Tct4bOsCVyyY3V8ZlxTUrMoPBtTODouN8my+:HSVCMHOZmMOYou7d
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-