General
- Target 9153102c81da5499128dbd74f10a2623_JaffaCakes118
- Size 561KB
- Sample240603-lref4sbg22
- SHA256 ea3442ec3d9de403867827034d631727a664677c369c656b669b3944fe078369
- MD5 9153102c81da5499128dbd74f10a2623
- SHA1 56c7e768cab5f0f1305abe4bb4d551b78d0212c8
- SHA512 24b05b5e569ff7af7cf8610e700b7fd7705e3cc9ce5bf9f2939f83e3ba922dfbc28a15ca1bdc7e7b4266b0f519851d77073dcd92ae0ff5e97f56c6c782858b3c
- SSDEEP 12288:zgDhdkq5BCoC5LfWSLTUQpr2Zu19Qm58Z/whHEFVu0:zgDhdkMRWfLTUO2Zu1um58Z/q8
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
9153102c81da5499128dbd74f10a2623_JaffaCakes118.exe
Resource
win7-20240221-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
9153102c81da5499128dbd74f10a2623_JaffaCakes118.exe
Resource
win10v2004-20240508-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 9153102c81da5499128dbd74f10a2623_JaffaCakes118
- Size 561KB
- SHA256 ea3442ec3d9de403867827034d631727a664677c369c656b669b3944fe078369
- MD5 9153102c81da5499128dbd74f10a2623
- SHA1 56c7e768cab5f0f1305abe4bb4d551b78d0212c8
- SHA512 24b05b5e569ff7af7cf8610e700b7fd7705e3cc9ce5bf9f2939f83e3ba922dfbc28a15ca1bdc7e7b4266b0f519851d77073dcd92ae0ff5e97f56c6c782858b3c
- SSDEEP 12288:zgDhdkq5BCoC5LfWSLTUQpr2Zu19Qm58Z/whHEFVu0:zgDhdkMRWfLTUO2Zu1um58Z/q8
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Drops file in System32 directory