General
-
Target
6da0204ca0a786529e6f95dfffc5f57c_JaffaCakes118
-
Size
2.2MB
-
Sample
240524-hewyvagf91
-
MD5
6da0204ca0a786529e6f95dfffc5f57c
-
SHA1
9162a96696b8aff1a092bdd0b037da6a27948a2c
-
SHA256
0635f08fefd0ad89a9bc9693796a794bae35a1836f324887e8edfc7175ef5a64
-
SHA512
81491b4c0903b5be3969d70c480e9714d15eb074de35bd2fe019ffccdf1475f77e0b1310acd127902382420b9201686a8dbc631646b1a302a9b4e485e8e4e249
-
SSDEEP
24576:h1OYdaOLqU2Uzf5UilCfBJyQWS9oLDBXEZc78KU88SlhrVzcH:h1OsRqBI5UilCfxmnvthrRA
Static task
static1
Behavioral task
behavioral1
Sample
6da0204ca0a786529e6f95dfffc5f57c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6da0204ca0a786529e6f95dfffc5f57c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
6da0204ca0a786529e6f95dfffc5f57c_JaffaCakes118
-
Size
2.2MB
-
MD5
6da0204ca0a786529e6f95dfffc5f57c
-
SHA1
9162a96696b8aff1a092bdd0b037da6a27948a2c
-
SHA256
0635f08fefd0ad89a9bc9693796a794bae35a1836f324887e8edfc7175ef5a64
-
SHA512
81491b4c0903b5be3969d70c480e9714d15eb074de35bd2fe019ffccdf1475f77e0b1310acd127902382420b9201686a8dbc631646b1a302a9b4e485e8e4e249
-
SSDEEP
24576:h1OYdaOLqU2Uzf5UilCfBJyQWS9oLDBXEZc78KU88SlhrVzcH:h1OsRqBI5UilCfxmnvthrRA
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-