General
-
Target
647bc0f51494ae1fec6eefdfe609cc46_JaffaCakes118
-
Size
620KB
-
Sample
240521-x6s4lafh88
-
MD5
647bc0f51494ae1fec6eefdfe609cc46
-
SHA1
eafd46c93e3cd10b0117df905ee6035ba40fabad
-
SHA256
132a7438b98ded28d3975855b1bc596399038b935635ccfca7b9ebbdd1ba1a85
-
SHA512
ad5bd944ebd38192b3649ac10d19b584d1a452685975eca88c5ab48544535df2e09d4f423186ad2737033ea75fc0aa0438d64af693e86668b730d9091e6a9a7f
-
SSDEEP
12288:iKmvp4Mc97OnZ4jfSQA8whpzzbj9Ov4ukdNZihb6fJ:Fmvp4fOZKfSQA86/bc4ukdHmb6fJ
Static task
static1
Behavioral task
behavioral1
Sample
647bc0f51494ae1fec6eefdfe609cc46_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
647bc0f51494ae1fec6eefdfe609cc46_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
647bc0f51494ae1fec6eefdfe609cc46_JaffaCakes118
-
Size
620KB
-
MD5
647bc0f51494ae1fec6eefdfe609cc46
-
SHA1
eafd46c93e3cd10b0117df905ee6035ba40fabad
-
SHA256
132a7438b98ded28d3975855b1bc596399038b935635ccfca7b9ebbdd1ba1a85
-
SHA512
ad5bd944ebd38192b3649ac10d19b584d1a452685975eca88c5ab48544535df2e09d4f423186ad2737033ea75fc0aa0438d64af693e86668b730d9091e6a9a7f
-
SSDEEP
12288:iKmvp4Mc97OnZ4jfSQA8whpzzbj9Ov4ukdNZihb6fJ:Fmvp4fOZKfSQA86/bc4ukdHmb6fJ
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-