General
-
Target
4d420f985eceb4167e21b6a4529e0b49_JaffaCakes118.exe
-
Size
365KB
-
Sample
240505-k4b13sdc6w
-
MD5
4d420f985eceb4167e21b6a4529e0b49
-
SHA1
5dddf6f312ab50ec958555bba017a1a47b64b9e3
-
SHA256
6c368993d5ae432e1f6ebaa5af773abc2b3e0c01c25d5f1d71b2305a897760c8
-
SHA512
4245cfb79c6197f0899300218e0c541c1d59021934e93c96f4d658675825d165c77ceecfd3112bc4a7be3313638e169022e81e6872850d67f12bebfeba85f665
-
SSDEEP
6144:OuJkl8DV12C28tLN2/FkCO0aHftvCGCBhDOHjTPmXHk62p1:OzGL2C2aZ2/F1XaveOHjT5
Behavioral task
behavioral1
Sample
4d420f985eceb4167e21b6a4529e0b49_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.165
218.54.31.226
Targets
-
-
Target
4d420f985eceb4167e21b6a4529e0b49_JaffaCakes118.exe
-
Size
365KB
-
MD5
4d420f985eceb4167e21b6a4529e0b49
-
SHA1
5dddf6f312ab50ec958555bba017a1a47b64b9e3
-
SHA256
6c368993d5ae432e1f6ebaa5af773abc2b3e0c01c25d5f1d71b2305a897760c8
-
SHA512
4245cfb79c6197f0899300218e0c541c1d59021934e93c96f4d658675825d165c77ceecfd3112bc4a7be3313638e169022e81e6872850d67f12bebfeba85f665
-
SSDEEP
6144:OuJkl8DV12C28tLN2/FkCO0aHftvCGCBhDOHjTPmXHk62p1:OzGL2C2aZ2/F1XaveOHjT5
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-