General
- Target b206cdd2aef6f364573fbf44f436f668_JaffaCakes118
- Size 10.0MB
- Sample240616-gp86gswdrj
- SHA256 261f20fbeb4c9a65df917022ded317dda7934ddba37936423833c4060f2bc884
- MD5 b206cdd2aef6f364573fbf44f436f668
- SHA1 bf69842cee8394b3fe41b74909bc2737af3ea7aa
- SHA512 fe79912a2f1deb94955ddadfd18022fefb226beddf80ea8fd38f803795862b8f8717fe28b6a0e1bb9d55d6010075313b3becb95a70434cb38eb5c73ae01b5dd0
- SSDEEP 196608:KMxsRWjnp/4b6cJbRWSRCGHlD4N6aLnWXsCX0ssKdOeAUqCyFDs:KpQrVkJHxRCGF2jGhqCym
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b206cdd2aef6f364573fbf44f436f668_JaffaCakes118.exe
Resource
win7-20240508-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
b206cdd2aef6f364573fbf44f436f668_JaffaCakes118.exe
Resource
win10v2004-20240508-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b206cdd2aef6f364573fbf44f436f668_JaffaCakes118
- Size 10.0MB
- SHA256 261f20fbeb4c9a65df917022ded317dda7934ddba37936423833c4060f2bc884
- MD5 b206cdd2aef6f364573fbf44f436f668
- SHA1 bf69842cee8394b3fe41b74909bc2737af3ea7aa
- SHA512 fe79912a2f1deb94955ddadfd18022fefb226beddf80ea8fd38f803795862b8f8717fe28b6a0e1bb9d55d6010075313b3becb95a70434cb38eb5c73ae01b5dd0
- SSDEEP 196608:KMxsRWjnp/4b6cJbRWSRCGHlD4N6aLnWXsCX0ssKdOeAUqCyFDs:KpQrVkJHxRCGF2jGhqCym
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.