General
-
Target
a3dfe49e23271d8224e85263002119b5_JaffaCakes118
-
Size
664KB
-
Sample
240613-fgl6baycmm
-
MD5
a3dfe49e23271d8224e85263002119b5
-
SHA1
9cd80e078f7db5c6bfd2a9e0f9b42f35f0434ce8
-
SHA256
341db1a879deb81f787d650c1290f9aad907c34494f965c9c9d67933465ae757
-
SHA512
dd716a57bdc61bbb470f32979940a17fa69d417d538ab02900b583288686a9f54a045d9b23261e39f3123e421ecc85d682af962eb27d875d5306823d35f6a584
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16I:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1n
Static task
static1
Behavioral task
behavioral1
Sample
a3dfe49e23271d8224e85263002119b5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3dfe49e23271d8224e85263002119b5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
a3dfe49e23271d8224e85263002119b5_JaffaCakes118
-
Size
664KB
-
MD5
a3dfe49e23271d8224e85263002119b5
-
SHA1
9cd80e078f7db5c6bfd2a9e0f9b42f35f0434ce8
-
SHA256
341db1a879deb81f787d650c1290f9aad907c34494f965c9c9d67933465ae757
-
SHA512
dd716a57bdc61bbb470f32979940a17fa69d417d538ab02900b583288686a9f54a045d9b23261e39f3123e421ecc85d682af962eb27d875d5306823d35f6a584
-
SSDEEP
12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16I:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1n
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-