General
- Target a7f58ccb312dbd23a5d2000bee283183_JaffaCakes118
- Size 671KB
- Sample240614-eq6ewaydjn
- SHA256 125e3c3f79b5b7508e6761a2e37274403488bc30a69d9138c7d2d43728d0a5f8
- MD5 a7f58ccb312dbd23a5d2000bee283183
- SHA1 22f74127983f7c00abdc32e9309c25c4383e32e2
- SHA512 33b6d33c513d80710b5ee85b417d0e3f57243cac9bcd92445468fee4ee13bdabea0cc77b34716dccca43bfaedb892a3c58a56aa1b5b851dee9a88e8dfd85ce2d
- SSDEEP 12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL6I:qJ7Uzj4yUo7Fdle8WIbCL6I
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a7f58ccb312dbd23a5d2000bee283183_JaffaCakes118.exe
Resource
win7-20240611-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a7f58ccb312dbd23a5d2000bee283183_JaffaCakes118.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target a7f58ccb312dbd23a5d2000bee283183_JaffaCakes118
- Size 671KB
- SHA256 125e3c3f79b5b7508e6761a2e37274403488bc30a69d9138c7d2d43728d0a5f8
- MD5 a7f58ccb312dbd23a5d2000bee283183
- SHA1 22f74127983f7c00abdc32e9309c25c4383e32e2
- SHA512 33b6d33c513d80710b5ee85b417d0e3f57243cac9bcd92445468fee4ee13bdabea0cc77b34716dccca43bfaedb892a3c58a56aa1b5b851dee9a88e8dfd85ce2d
- SSDEEP 12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL6I:qJ7Uzj4yUo7Fdle8WIbCL6I
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)