General
-
Target
933d4a779309aedb897816b62f2bc6ce_JaffaCakes118
-
Size
524KB
-
Sample
240604-bh8y9afh4v
-
MD5
933d4a779309aedb897816b62f2bc6ce
-
SHA1
2c0ce939e79f3ec5658b1824356163c21446166c
-
SHA256
13e5fa7bb7c75ee80c3ca6671880fe5a0b146028adb63f845415cad9ed07fbd8
-
SHA512
e430a37862f192f47c555f0258f451db1b859edcb76b0f110a092dbeea4259999e857ffab98effef5156efc6a7889c5dbed328b9d99b814c93004231f2055138
-
SSDEEP
12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i
Static task
static1
Behavioral task
behavioral1
Sample
933d4a779309aedb897816b62f2bc6ce_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
933d4a779309aedb897816b62f2bc6ce_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
933d4a779309aedb897816b62f2bc6ce_JaffaCakes118
-
Size
524KB
-
MD5
933d4a779309aedb897816b62f2bc6ce
-
SHA1
2c0ce939e79f3ec5658b1824356163c21446166c
-
SHA256
13e5fa7bb7c75ee80c3ca6671880fe5a0b146028adb63f845415cad9ed07fbd8
-
SHA512
e430a37862f192f47c555f0258f451db1b859edcb76b0f110a092dbeea4259999e857ffab98effef5156efc6a7889c5dbed328b9d99b814c93004231f2055138
-
SSDEEP
12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-