General
-
Target
12fa601e1afdc16b2a2b187fbdd123fd_JaffaCakes118
-
Size
535KB
-
Sample
240626-w43pkswhrg
-
MD5
12fa601e1afdc16b2a2b187fbdd123fd
-
SHA1
4d0dc330c85aa3a5a9f0d25ef603bf371a010cb3
-
SHA256
281bebebebb58c2b7427630794e7fc89e55e20befe5c161cd13d08e938c02c8a
-
SHA512
bbac40f7309db38bea9e883e4c2e7d7c8da719eea158e42ec952e8015ca26fa8feb30602cfcca4c14aef7617d5fabb74b7f69f8141eb53f00096f49407d781a9
-
SSDEEP
12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oS2Q:cLjQC+bs0YOQ
Behavioral task
behavioral1
Sample
12fa601e1afdc16b2a2b187fbdd123fd_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
12fa601e1afdc16b2a2b187fbdd123fd_JaffaCakes118
-
Size
535KB
-
MD5
12fa601e1afdc16b2a2b187fbdd123fd
-
SHA1
4d0dc330c85aa3a5a9f0d25ef603bf371a010cb3
-
SHA256
281bebebebb58c2b7427630794e7fc89e55e20befe5c161cd13d08e938c02c8a
-
SHA512
bbac40f7309db38bea9e883e4c2e7d7c8da719eea158e42ec952e8015ca26fa8feb30602cfcca4c14aef7617d5fabb74b7f69f8141eb53f00096f49407d781a9
-
SSDEEP
12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oS2Q:cLjQC+bs0YOQ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-