General
-
Target
3f1f0fb502c233860269aaddc3a8fa6f_JaffaCakes118
-
Size
524KB
-
Sample
240513-mxws1sba8v
-
MD5
3f1f0fb502c233860269aaddc3a8fa6f
-
SHA1
6c4283234ee175050cb06a6a0a05e806ea24f629
-
SHA256
76e58b224d4eefde468c9a262291887b96e200d09dba30803af6393a2b84e73a
-
SHA512
6a5d6858defb0085079282539cd7339ec1e7d06f14186e7019dddad05d36acaf510ce1234d2d99168fe99e6a5fb9d17b5a5fcbf0d8dc7ed614ffd3ef57757d92
-
SSDEEP
12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i
Static task
static1
Behavioral task
behavioral1
Sample
3f1f0fb502c233860269aaddc3a8fa6f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3f1f0fb502c233860269aaddc3a8fa6f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
3f1f0fb502c233860269aaddc3a8fa6f_JaffaCakes118
-
Size
524KB
-
MD5
3f1f0fb502c233860269aaddc3a8fa6f
-
SHA1
6c4283234ee175050cb06a6a0a05e806ea24f629
-
SHA256
76e58b224d4eefde468c9a262291887b96e200d09dba30803af6393a2b84e73a
-
SHA512
6a5d6858defb0085079282539cd7339ec1e7d06f14186e7019dddad05d36acaf510ce1234d2d99168fe99e6a5fb9d17b5a5fcbf0d8dc7ed614ffd3ef57757d92
-
SSDEEP
12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-