General
-
Target
59b3866d0aaf9e4e1a69fd322fdd5e67_JaffaCakes118
-
Size
7.8MB
-
Sample
240719-al9vaatfln
-
MD5
59b3866d0aaf9e4e1a69fd322fdd5e67
-
SHA1
7770cd35c161908c1e5e87465888086afdcd00d4
-
SHA256
39883ca849f5f8c9b2d9772cb47acf2c2e9774dfbd788fc1ee82ccfecd83f942
-
SHA512
8ffac5d0b809e51a78c79bea651cd47e3699ea9555716a189a21e5b0f766731b6d0019d57b1470ec15d2bcd637f3c825d21fd56f48bbad30c153cce3ab17bd88
-
SSDEEP
196608:FAdqBtWzotwYaRojgGG+/N16OVaXiplWxaUvX0/HW6RcBXuX:eQBt/wxaz/aOVaXipOaf2sP
Static task
static1
Behavioral task
behavioral1
Sample
59b3866d0aaf9e4e1a69fd322fdd5e67_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
59b3866d0aaf9e4e1a69fd322fdd5e67_JaffaCakes118
-
Size
7.8MB
-
MD5
59b3866d0aaf9e4e1a69fd322fdd5e67
-
SHA1
7770cd35c161908c1e5e87465888086afdcd00d4
-
SHA256
39883ca849f5f8c9b2d9772cb47acf2c2e9774dfbd788fc1ee82ccfecd83f942
-
SHA512
8ffac5d0b809e51a78c79bea651cd47e3699ea9555716a189a21e5b0f766731b6d0019d57b1470ec15d2bcd637f3c825d21fd56f48bbad30c153cce3ab17bd88
-
SSDEEP
196608:FAdqBtWzotwYaRojgGG+/N16OVaXiplWxaUvX0/HW6RcBXuX:eQBt/wxaz/aOVaXipOaf2sP
-
Ardamax main executable
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Drops file in System32 directory
-