General
-
Target
12ce85d8cd7f9d68cf1db642ee90c140_JaffaCakes118
-
Size
161KB
-
Sample
240626-v358msvbqc
-
MD5
12ce85d8cd7f9d68cf1db642ee90c140
-
SHA1
a0de3808b5982f4fee4ed347fa3432d86fb7138b
-
SHA256
1fe248257d555e7f55c2875397c928207c018da428dcb6f1ae42a14c3d7bf17f
-
SHA512
c6b97aa164e1d86213f0471dcdf7ffc5baf86235149af204a7013cb60ef720f02cccb0be8269756c6e1206a50c743572f54ddf30b14083908960690e9cdcdaab
-
SSDEEP
3072:y6lXWN336MdMfLirVQW0/nyyplKgy330wN6qb3MAxwgKT:PXgqqULirVT01g0wRb37xg
Static task
static1
Behavioral task
behavioral1
Sample
12ce85d8cd7f9d68cf1db642ee90c140_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Targets
-
-
Target
12ce85d8cd7f9d68cf1db642ee90c140_JaffaCakes118
-
Size
161KB
-
MD5
12ce85d8cd7f9d68cf1db642ee90c140
-
SHA1
a0de3808b5982f4fee4ed347fa3432d86fb7138b
-
SHA256
1fe248257d555e7f55c2875397c928207c018da428dcb6f1ae42a14c3d7bf17f
-
SHA512
c6b97aa164e1d86213f0471dcdf7ffc5baf86235149af204a7013cb60ef720f02cccb0be8269756c6e1206a50c743572f54ddf30b14083908960690e9cdcdaab
-
SSDEEP
3072:y6lXWN336MdMfLirVQW0/nyyplKgy330wN6qb3MAxwgKT:PXgqqULirVT01g0wRb37xg
-
Modifies WinLogon for persistence
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-