General
-
Target
8a22fb4a108158be1b41b22033dfb18a_JaffaCakes118
-
Size
490KB
-
Sample
240811-m933vs1drh
-
MD5
8a22fb4a108158be1b41b22033dfb18a
-
SHA1
388e3270d09fb6278dd5bed0a0c639f2cda20fbc
-
SHA256
46ba6ff4dc49b5f6393d204cc2f999704c1d1719e6173f71b6f74fedba90c7fa
-
SHA512
48ea965153444d6a8e2bbc347231bc135602d6fe9fe27140da75ff32060ceb02e014ed8806bf3fc0848fa56d9a0e0cdf1aba9859c6b8ffbf73927eb7d3019580
-
SSDEEP
12288:myZB2GYrdWrXusDCanzgCZpTxf9MzpwExcEPBBmkT:m4glrEDD1zgCPxGHg4
Static task
static1
Behavioral task
behavioral1
Sample
8a22fb4a108158be1b41b22033dfb18a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a22fb4a108158be1b41b22033dfb18a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
8a22fb4a108158be1b41b22033dfb18a_JaffaCakes118
-
Size
490KB
-
MD5
8a22fb4a108158be1b41b22033dfb18a
-
SHA1
388e3270d09fb6278dd5bed0a0c639f2cda20fbc
-
SHA256
46ba6ff4dc49b5f6393d204cc2f999704c1d1719e6173f71b6f74fedba90c7fa
-
SHA512
48ea965153444d6a8e2bbc347231bc135602d6fe9fe27140da75ff32060ceb02e014ed8806bf3fc0848fa56d9a0e0cdf1aba9859c6b8ffbf73927eb7d3019580
-
SSDEEP
12288:myZB2GYrdWrXusDCanzgCZpTxf9MzpwExcEPBBmkT:m4glrEDD1zgCPxGHg4
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-