Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 08:17
Static task
static1
Behavioral task
behavioral1
Sample
3ca0634ecdaca5bf54f327e0daef3095_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ca0634ecdaca5bf54f327e0daef3095_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ca0634ecdaca5bf54f327e0daef3095_JaffaCakes118.exe
-
Size
81KB
-
MD5
3ca0634ecdaca5bf54f327e0daef3095
-
SHA1
1d7a34c927999dc797cc0e5cbae7861f5ee4b691
-
SHA256
33dc99dd0c1756546625ad7ae9b557a6bcfc1e115fa6b816d46c76b8269b6944
-
SHA512
01fbefd0fc5920be1f2425403136f7b81e1567d95d35b57a137c85153a05fd319bdfc6614ac73dabab651cabf2d8f4db869e592566154180eb161fea8e8dc154
-
SSDEEP
768:CI0JZbxR2OjXwSP7btrKYKRb7YELnupXt9XzWfTF:CzZRXw27UYWb7jLwjSr
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Control Panel\International\Geo\Nation 3ca0634ecdaca5bf54f327e0daef3095_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).