General
-
Target
fbbcf16b6abe3a62aaf37766fb55125d_JaffaCakes118
-
Size
96KB
-
Sample
240420-c3agvsfb4v
-
MD5
fbbcf16b6abe3a62aaf37766fb55125d
-
SHA1
f4ae923ea08bca29270982f0757e497d9c566c9b
-
SHA256
4b6c23640e616dcc75de1b1817cbb2a89a5b26e83ec9fdc095af67849cf7ff19
-
SHA512
fbb03ddaa5adf6e409e5ed6d909819b9e0e9ca1d2b23cf0d585f1052827442a40a071ecd3e1f50ef3ed2d2bbae473ce2b688ad8b1186a1af7f57a08eca6863ad
-
SSDEEP
1536:f+kENVp8UpXSmrWDDAolXWsofKNMgAiye5lzj5P3yWdrpr4dfztDmNN8D:mR0QWDllpNMgAhert/3drpr4dfxDmNN8
Behavioral task
behavioral1
Sample
fbbcf16b6abe3a62aaf37766fb55125d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fbbcf16b6abe3a62aaf37766fb55125d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Targets
-
-
Target
fbbcf16b6abe3a62aaf37766fb55125d_JaffaCakes118
-
Size
96KB
-
MD5
fbbcf16b6abe3a62aaf37766fb55125d
-
SHA1
f4ae923ea08bca29270982f0757e497d9c566c9b
-
SHA256
4b6c23640e616dcc75de1b1817cbb2a89a5b26e83ec9fdc095af67849cf7ff19
-
SHA512
fbb03ddaa5adf6e409e5ed6d909819b9e0e9ca1d2b23cf0d585f1052827442a40a071ecd3e1f50ef3ed2d2bbae473ce2b688ad8b1186a1af7f57a08eca6863ad
-
SSDEEP
1536:f+kENVp8UpXSmrWDDAolXWsofKNMgAiye5lzj5P3yWdrpr4dfztDmNN8D:mR0QWDllpNMgAhert/3drpr4dfxDmNN8
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Drops file in System32 directory
-