General
-
Target
13b5fbb2847f2f50d7b7427f9c1d892b_JaffaCakes118
-
Size
389KB
-
Sample
240626-2fkfzszhqk
-
MD5
13b5fbb2847f2f50d7b7427f9c1d892b
-
SHA1
ade31cdbbf6ab44e1333fe4b26e3c20345c0e723
-
SHA256
353a89691d9d7e9ac7dd5b723da84e4e84abb2a6a9988b5688b7b320ed61de5e
-
SHA512
e32816a467d8639a1fad36171d5d49c176d21e15f574512e494f1d1ffcfbd4b963f2e07e4abc8c15f6137751270d48aeb8c44725bdc77eeac2baaa53105dc75e
-
SSDEEP
12288:c0Siiu2cOMayaZerXXmhFXtVwrypCQTubDf:K3gV6eihQOXTID
Behavioral task
behavioral1
Sample
13b5fbb2847f2f50d7b7427f9c1d892b_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
13b5fbb2847f2f50d7b7427f9c1d892b_JaffaCakes118
-
Size
389KB
-
MD5
13b5fbb2847f2f50d7b7427f9c1d892b
-
SHA1
ade31cdbbf6ab44e1333fe4b26e3c20345c0e723
-
SHA256
353a89691d9d7e9ac7dd5b723da84e4e84abb2a6a9988b5688b7b320ed61de5e
-
SHA512
e32816a467d8639a1fad36171d5d49c176d21e15f574512e494f1d1ffcfbd4b963f2e07e4abc8c15f6137751270d48aeb8c44725bdc77eeac2baaa53105dc75e
-
SSDEEP
12288:c0Siiu2cOMayaZerXXmhFXtVwrypCQTubDf:K3gV6eihQOXTID
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-