General
-
Target
62c01f1b2ac0a7bab6c3b50fd51e6a36_JaffaCakes118
-
Size
1.1MB
-
Sample
240521-k4twwsfg38
-
MD5
62c01f1b2ac0a7bab6c3b50fd51e6a36
-
SHA1
cfc301a04b9a4ffeb0dc4578c1998a4eb4754f7b
-
SHA256
c46a631f0bc82d8c2d46e9d8634cc50242987fa7749cac097439298d1d0c1d6e
-
SHA512
6617b2723526a8f569d796352e21fb902d1db76dd3a3c6b6562915a7fb087b7e65871921fcdc97871b302d77efa0b60d63872bb0b8bae4a7d982486428cd43ab
-
SSDEEP
24576:HRmJkcoQricOIQxiZY1iagI+bpJBIAkPcJCqbVvi1N:sJZoQrbTFZY1iagTpVkybVqT
Static task
static1
Behavioral task
behavioral1
Sample
62c01f1b2ac0a7bab6c3b50fd51e6a36_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
62c01f1b2ac0a7bab6c3b50fd51e6a36_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
62c01f1b2ac0a7bab6c3b50fd51e6a36_JaffaCakes118
-
Size
1.1MB
-
MD5
62c01f1b2ac0a7bab6c3b50fd51e6a36
-
SHA1
cfc301a04b9a4ffeb0dc4578c1998a4eb4754f7b
-
SHA256
c46a631f0bc82d8c2d46e9d8634cc50242987fa7749cac097439298d1d0c1d6e
-
SHA512
6617b2723526a8f569d796352e21fb902d1db76dd3a3c6b6562915a7fb087b7e65871921fcdc97871b302d77efa0b60d63872bb0b8bae4a7d982486428cd43ab
-
SSDEEP
24576:HRmJkcoQricOIQxiZY1iagI+bpJBIAkPcJCqbVvi1N:sJZoQrbTFZY1iagTpVkybVqT
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-