General
-
Target
fb413ff53b5b9848fbc148667207a401_JaffaCakes118
-
Size
3.7MB
-
Sample
240419-1vznsahd7y
-
MD5
fb413ff53b5b9848fbc148667207a401
-
SHA1
11a18002320bbc7696dd443114a937087ed4211a
-
SHA256
b6ae02e28123f77e7f8638db403e518b080d23aa467a3e8b88d42e5616a45ccf
-
SHA512
2c1d21189fd900eae4868a00119bc4052a9866f443dcea4e364aae9576d14d43949d5f285254ecf2ce705208275386f5105503b152c87845444a1441064ae34e
-
SSDEEP
98304:sc//////jfAJIvxFN7/NwWOVDf6ni4M7mcWuZQuaWaE6zWw:nfAJIpJG76iH7mP2VmzT
Static task
static1
Behavioral task
behavioral1
Sample
fb413ff53b5b9848fbc148667207a401_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
fb413ff53b5b9848fbc148667207a401_JaffaCakes118
-
Size
3.7MB
-
MD5
fb413ff53b5b9848fbc148667207a401
-
SHA1
11a18002320bbc7696dd443114a937087ed4211a
-
SHA256
b6ae02e28123f77e7f8638db403e518b080d23aa467a3e8b88d42e5616a45ccf
-
SHA512
2c1d21189fd900eae4868a00119bc4052a9866f443dcea4e364aae9576d14d43949d5f285254ecf2ce705208275386f5105503b152c87845444a1441064ae34e
-
SSDEEP
98304:sc//////jfAJIvxFN7/NwWOVDf6ni4M7mcWuZQuaWaE6zWw:nfAJIpJG76iH7mP2VmzT
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-