General
-
Target
9783960bd13fc9f6e266f220c5a174aa_JaffaCakes118
-
Size
3.5MB
-
Sample
240605-jkb2asag54
-
MD5
9783960bd13fc9f6e266f220c5a174aa
-
SHA1
6a483c098d04152ed62b4e53600e819eaad163b4
-
SHA256
98b7ae6e91fe56a7597d1559967fad5ecc42e46c5021587dfa4be6c444412514
-
SHA512
2f808cbca7eeeaaac626d7519caad4ea407345b542c8a249179567d4da0c54cd8a05f6dd6dc9179a51ad23f4ce456490f212eea6c37dff6376ba8bd5884ae606
-
SSDEEP
98304:X3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZzl:Hbeirfa1GZN+PhLIZZ
Static task
static1
Behavioral task
behavioral1
Sample
9783960bd13fc9f6e266f220c5a174aa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9783960bd13fc9f6e266f220c5a174aa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
9783960bd13fc9f6e266f220c5a174aa_JaffaCakes118
-
Size
3.5MB
-
MD5
9783960bd13fc9f6e266f220c5a174aa
-
SHA1
6a483c098d04152ed62b4e53600e819eaad163b4
-
SHA256
98b7ae6e91fe56a7597d1559967fad5ecc42e46c5021587dfa4be6c444412514
-
SHA512
2f808cbca7eeeaaac626d7519caad4ea407345b542c8a249179567d4da0c54cd8a05f6dd6dc9179a51ad23f4ce456490f212eea6c37dff6376ba8bd5884ae606
-
SSDEEP
98304:X3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZzl:Hbeirfa1GZN+PhLIZZ
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-