General
-
Target
7013c7cf84eea77f1730347bbf04392a_JaffaCakes118
-
Size
3.5MB
-
Sample
240524-2zmqfsee52
-
MD5
7013c7cf84eea77f1730347bbf04392a
-
SHA1
380520207c76a1d2b51fc94988ed8f04b8724165
-
SHA256
c20ad4c70a4ced174b391e8beef2fd35f519986f25034d15f4aa0e02c0cad315
-
SHA512
b576b8d4565c25f23230f8dd7f9337af4010b690ca0f6ead3ee275a61032bed935b6728c773598dda1dcfd37a43d79228715991552298abeac991a48b680096f
-
SSDEEP
98304:k3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZzT:2beirfa1GZN+PhLIZ3
Static task
static1
Behavioral task
behavioral1
Sample
7013c7cf84eea77f1730347bbf04392a_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7013c7cf84eea77f1730347bbf04392a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
7013c7cf84eea77f1730347bbf04392a_JaffaCakes118
-
Size
3.5MB
-
MD5
7013c7cf84eea77f1730347bbf04392a
-
SHA1
380520207c76a1d2b51fc94988ed8f04b8724165
-
SHA256
c20ad4c70a4ced174b391e8beef2fd35f519986f25034d15f4aa0e02c0cad315
-
SHA512
b576b8d4565c25f23230f8dd7f9337af4010b690ca0f6ead3ee275a61032bed935b6728c773598dda1dcfd37a43d79228715991552298abeac991a48b680096f
-
SSDEEP
98304:k3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZzT:2beirfa1GZN+PhLIZ3
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-