General
-
Target
49ea0519365a9ec9ae876c72559df216_JaffaCakes118
-
Size
1.1MB
-
Sample
240516-hs6p7she39
-
MD5
49ea0519365a9ec9ae876c72559df216
-
SHA1
52c8bed43a93653f421c1e3af38949d914dbcb59
-
SHA256
9c6fa6305681ca11ce33f629f92ca36af57ebc456afed26b36eb2a4223bba632
-
SHA512
5c70862c1627133931b552b356f95f93cd1018d7996b6819e25a7e1394d3cdf16590b5b79890f9a07c87000384c0283aeba6d04e33d2d2716371efedf90b0135
-
SSDEEP
12288:XsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQi:8V4W8hqBYgnBLfVqx1Wjkv
Static task
static1
Behavioral task
behavioral1
Sample
49ea0519365a9ec9ae876c72559df216_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
49ea0519365a9ec9ae876c72559df216_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
49ea0519365a9ec9ae876c72559df216_JaffaCakes118
-
Size
1.1MB
-
MD5
49ea0519365a9ec9ae876c72559df216
-
SHA1
52c8bed43a93653f421c1e3af38949d914dbcb59
-
SHA256
9c6fa6305681ca11ce33f629f92ca36af57ebc456afed26b36eb2a4223bba632
-
SHA512
5c70862c1627133931b552b356f95f93cd1018d7996b6819e25a7e1394d3cdf16590b5b79890f9a07c87000384c0283aeba6d04e33d2d2716371efedf90b0135
-
SSDEEP
12288:XsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQi:8V4W8hqBYgnBLfVqx1Wjkv
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-