General
-
Target
6d65ec02b68dc7d835391dc07d195ed9_JaffaCakes118
-
Size
664KB
-
Sample
240524-fktdsseb94
-
MD5
6d65ec02b68dc7d835391dc07d195ed9
-
SHA1
ac410243f8715e79fe09f07fd7cefb80361d7704
-
SHA256
1227828db719ea2f6cdf3ab634cebbb29a9f9e4c3f4e72393cd2204be8b2546a
-
SHA512
e4091b054c789ce6fd7be037979be58a143f6dc1be1cf7a874fd69e4d8de73f63c202cdfd911478306783c1f9a6acb5c0922829fbf4410c2b595ce7c9e63db3e
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16y:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1N
Static task
static1
Behavioral task
behavioral1
Sample
6d65ec02b68dc7d835391dc07d195ed9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6d65ec02b68dc7d835391dc07d195ed9_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
6d65ec02b68dc7d835391dc07d195ed9_JaffaCakes118
-
Size
664KB
-
MD5
6d65ec02b68dc7d835391dc07d195ed9
-
SHA1
ac410243f8715e79fe09f07fd7cefb80361d7704
-
SHA256
1227828db719ea2f6cdf3ab634cebbb29a9f9e4c3f4e72393cd2204be8b2546a
-
SHA512
e4091b054c789ce6fd7be037979be58a143f6dc1be1cf7a874fd69e4d8de73f63c202cdfd911478306783c1f9a6acb5c0922829fbf4410c2b595ce7c9e63db3e
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16y:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1N
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-