General
-
Target
ec12b023497a3799eb706c9344088e65_JaffaCakes118
-
Size
676KB
-
Sample
240919-yj29esxfpk
-
MD5
ec12b023497a3799eb706c9344088e65
-
SHA1
252be6454a66c88d0b8f171b291694df6d19f132
-
SHA256
99fa99ea8df6116f5d7405267e2cf96c0edbd32487fa8a498b6a0e0c9531aeb9
-
SHA512
ee025fa6b16d1071e939d86dec59c689a5f0f83302e390080d3803aa5683e11c7a471bb6cd02bd09147e3ed6630ef511752624c4f360b0da8d4a83456eba9241
-
SSDEEP
12288:JYjtxL4m9z74zoBJpgaR0gKZqwIPDX/0N9x78spWspgaU30WphMaOry3tNydUeK0:StxLvp7qoBnAHyj3jUUeKclM8rD2Mvx
Static task
static1
Behavioral task
behavioral1
Sample
ec12b023497a3799eb706c9344088e65_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec12b023497a3799eb706c9344088e65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ec12b023497a3799eb706c9344088e65_JaffaCakes118
-
Size
676KB
-
MD5
ec12b023497a3799eb706c9344088e65
-
SHA1
252be6454a66c88d0b8f171b291694df6d19f132
-
SHA256
99fa99ea8df6116f5d7405267e2cf96c0edbd32487fa8a498b6a0e0c9531aeb9
-
SHA512
ee025fa6b16d1071e939d86dec59c689a5f0f83302e390080d3803aa5683e11c7a471bb6cd02bd09147e3ed6630ef511752624c4f360b0da8d4a83456eba9241
-
SSDEEP
12288:JYjtxL4m9z74zoBJpgaR0gKZqwIPDX/0N9x78spWspgaU30WphMaOry3tNydUeK0:StxLvp7qoBnAHyj3jUUeKclM8rD2Mvx
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-