Analysis
-
max time kernel
91s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10/07/2024, 21:14
Static task
static1
Behavioral task
behavioral1
Sample
3667ee204fb67397626c6d5f0170a4e7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3667ee204fb67397626c6d5f0170a4e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3667ee204fb67397626c6d5f0170a4e7_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
3667ee204fb67397626c6d5f0170a4e7
-
SHA1
88332b4ff0b9981336c552d5e8fff0d06c60bd0f
-
SHA256
e6e24e635c5ef22107fe97bda7411aa653cda078a2b65c66c0c1dd797cfffd87
-
SHA512
0a3023f5cd61e13dbab45cae308bc58b63fb13a85e028d82023067d3dc2f1708a3f5b8e9273b4648372fb12397f1ddbd834eb136fc2af27d8485b1017bea0261
-
SSDEEP
12288:4bJWn12NHfvGpPAQj+bkzUkaju1dNyK3UodRujmmKTGPMyjARQq+ZgLeFv6q:40n12NHGpPf+SJ7U4ujmBGPMIA
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation 3667ee204fb67397626c6d5f0170a4e7_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).