General
-
Target
f9a9ea18c0ee7d0993fd47a2984e7c2a_JaffaCakes118
-
Size
4.1MB
-
Sample
240419-gvmjnsbf4y
-
MD5
f9a9ea18c0ee7d0993fd47a2984e7c2a
-
SHA1
161f3b083c65fe2dbffed8aa6e883d673cfe1f9a
-
SHA256
9d7f60862e63bd8135c6361965e9f28a581bb71df77c3bde00a06e2b088e072f
-
SHA512
e2967949d0bbd4f86d3f4a0e702db46fe8343efa42e542e179d06b73420ea65a23cc0a9a18d32ae05faa630273da4d83d100ff023510385fed0132bf7f403c0f
-
SSDEEP
98304:OkzzA+N5iyijm6njIYnZtedMwljmw9DbCtIMkmpe2rvrk:BBizj1jIzdZQw9bnae2rrk
Static task
static1
Behavioral task
behavioral1
Sample
f9a9ea18c0ee7d0993fd47a2984e7c2a_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f9a9ea18c0ee7d0993fd47a2984e7c2a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
f9a9ea18c0ee7d0993fd47a2984e7c2a_JaffaCakes118
-
Size
4.1MB
-
MD5
f9a9ea18c0ee7d0993fd47a2984e7c2a
-
SHA1
161f3b083c65fe2dbffed8aa6e883d673cfe1f9a
-
SHA256
9d7f60862e63bd8135c6361965e9f28a581bb71df77c3bde00a06e2b088e072f
-
SHA512
e2967949d0bbd4f86d3f4a0e702db46fe8343efa42e542e179d06b73420ea65a23cc0a9a18d32ae05faa630273da4d83d100ff023510385fed0132bf7f403c0f
-
SSDEEP
98304:OkzzA+N5iyijm6njIYnZtedMwljmw9DbCtIMkmpe2rvrk:BBizj1jIzdZQw9bnae2rrk
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-