General
-
Target
03f9aaca800ec3796f75956fc9b34814_JaffaCakes118
-
Size
1.2MB
-
Sample
240620-h6fqyawapf
-
MD5
03f9aaca800ec3796f75956fc9b34814
-
SHA1
57255c8cdd46a221add347e640302a97fa8c7fee
-
SHA256
c1ed7e4b4c91709868828267f5593f689eff1de89febad05884f757f52fcf090
-
SHA512
3946406529a321aceb9bcf533565799b5fe3064b051e1ebaf6aa4569575605656a300a35197121bb61409ee034a0bf181996755b0d53240a8df1c963cf5ec704
-
SSDEEP
24576:KpSGP3ZEgRhuRKOODzjJBwjOGfcCUWgEf0ZsMCmGJHxyALh+C:Oa+PjJaEWZAsTv1
Static task
static1
Behavioral task
behavioral1
Sample
03f9aaca800ec3796f75956fc9b34814_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03f9aaca800ec3796f75956fc9b34814_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
03f9aaca800ec3796f75956fc9b34814_JaffaCakes118
-
Size
1.2MB
-
MD5
03f9aaca800ec3796f75956fc9b34814
-
SHA1
57255c8cdd46a221add347e640302a97fa8c7fee
-
SHA256
c1ed7e4b4c91709868828267f5593f689eff1de89febad05884f757f52fcf090
-
SHA512
3946406529a321aceb9bcf533565799b5fe3064b051e1ebaf6aa4569575605656a300a35197121bb61409ee034a0bf181996755b0d53240a8df1c963cf5ec704
-
SSDEEP
24576:KpSGP3ZEgRhuRKOODzjJBwjOGfcCUWgEf0ZsMCmGJHxyALh+C:Oa+PjJaEWZAsTv1
Score10/10-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-