General
-
Target
8999e85eea73b68f70a257cfebee6eb9_JaffaCakes118
-
Size
709KB
-
Sample
240601-g6hd4add24
-
MD5
8999e85eea73b68f70a257cfebee6eb9
-
SHA1
68e8602d51bad98cacdbbbf38ebf1a6464f8b33c
-
SHA256
1403032c233f6d1a7c81576968f2681e589046bab43cba6d70cf45966c4d9709
-
SHA512
929454e0d4d90931599da6f0603b7ba9356e8264e72296a17d00c80e6ec7cb01e1560e0b47dc2db4bb613b51692728537aa6742ad8eb4c86cda5a9ddb092f665
-
SSDEEP
12288:Udk1Dbf27xi6PsmDJyodALFhRfM+JOGnK/FBOjX0nnRn1BjrH8IfV65:8k1DbHmko6L3y+gVObuRnnrHDV65
Static task
static1
Behavioral task
behavioral1
Sample
8999e85eea73b68f70a257cfebee6eb9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8999e85eea73b68f70a257cfebee6eb9_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
8999e85eea73b68f70a257cfebee6eb9_JaffaCakes118
-
Size
709KB
-
MD5
8999e85eea73b68f70a257cfebee6eb9
-
SHA1
68e8602d51bad98cacdbbbf38ebf1a6464f8b33c
-
SHA256
1403032c233f6d1a7c81576968f2681e589046bab43cba6d70cf45966c4d9709
-
SHA512
929454e0d4d90931599da6f0603b7ba9356e8264e72296a17d00c80e6ec7cb01e1560e0b47dc2db4bb613b51692728537aa6742ad8eb4c86cda5a9ddb092f665
-
SSDEEP
12288:Udk1Dbf27xi6PsmDJyodALFhRfM+JOGnK/FBOjX0nnRn1BjrH8IfV65:8k1DbHmko6L3y+gVObuRnnrHDV65
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-