General
-
Target
251e358132eb0da4c2678122f4e7bc54_JaffaCakes118
-
Size
2.1MB
-
Sample
240508-q2lqdshg38
-
MD5
251e358132eb0da4c2678122f4e7bc54
-
SHA1
48f4b322e926de7da257341672acdfcd3e9e9265
-
SHA256
5ac88b55e64f5190d922a40223fb6c19a81eb6140a80d6921c6e3f9f50d3ce48
-
SHA512
c65bd5313c3267497879441cad984e1fed38091e34b4a4a005872c98c1bcd06a5dcb988ffcca74718357176e664c925a8249b7fddca1d645f4f19650807c543b
-
SSDEEP
24576:h1OYdaOaqU2Uzf57ilCfBJyRWSb8iDBXEZc78KU88SehrUzcf:h1OsMqBI57ilCf+Ysv2hrMC
Static task
static1
Behavioral task
behavioral1
Sample
251e358132eb0da4c2678122f4e7bc54_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
251e358132eb0da4c2678122f4e7bc54_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
251e358132eb0da4c2678122f4e7bc54_JaffaCakes118
-
Size
2.1MB
-
MD5
251e358132eb0da4c2678122f4e7bc54
-
SHA1
48f4b322e926de7da257341672acdfcd3e9e9265
-
SHA256
5ac88b55e64f5190d922a40223fb6c19a81eb6140a80d6921c6e3f9f50d3ce48
-
SHA512
c65bd5313c3267497879441cad984e1fed38091e34b4a4a005872c98c1bcd06a5dcb988ffcca74718357176e664c925a8249b7fddca1d645f4f19650807c543b
-
SSDEEP
24576:h1OYdaOaqU2Uzf57ilCfBJyRWSb8iDBXEZc78KU88SehrUzcf:h1OsMqBI57ilCf+Ysv2hrMC
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-