General
-
Target
13b12569c26fd260ee26bc488e3ac15d_JaffaCakes118
-
Size
3.5MB
-
Sample
240504-vpl8lsfa79
-
MD5
13b12569c26fd260ee26bc488e3ac15d
-
SHA1
1039be099faa385c7be638b4c4ed5f115981672e
-
SHA256
20b2d766b652766ae1fb294f45bd5cbb6afb55d0c3fc94e204e189377b6fc21d
-
SHA512
14282cc6a909d16c435948da0801f3c8148c3d672c606b3f566c6ff7e9d6a2910ca68aaa253f672e7eb1c2106e26b079ef9292fe9fcde72f393ff3df764fd7bd
-
SSDEEP
98304:T3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZz6:7beirfa1GZN+PhLIZG
Static task
static1
Behavioral task
behavioral1
Sample
13b12569c26fd260ee26bc488e3ac15d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
13b12569c26fd260ee26bc488e3ac15d_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
13b12569c26fd260ee26bc488e3ac15d_JaffaCakes118
-
Size
3.5MB
-
MD5
13b12569c26fd260ee26bc488e3ac15d
-
SHA1
1039be099faa385c7be638b4c4ed5f115981672e
-
SHA256
20b2d766b652766ae1fb294f45bd5cbb6afb55d0c3fc94e204e189377b6fc21d
-
SHA512
14282cc6a909d16c435948da0801f3c8148c3d672c606b3f566c6ff7e9d6a2910ca68aaa253f672e7eb1c2106e26b079ef9292fe9fcde72f393ff3df764fd7bd
-
SSDEEP
98304:T3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZz6:7beirfa1GZN+PhLIZG
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-