General
-
Target
f9e27ce5c1b0e497e58aabea89f89d71_JaffaCakes118
-
Size
371KB
-
Sample
240927-g4453sygqj
-
MD5
f9e27ce5c1b0e497e58aabea89f89d71
-
SHA1
7777dad9a481ec8c33d535d5463d2ed88373509b
-
SHA256
19c7fedb2c1329fe5f392a2510793c98ab24e685974c3de1ebc18d395d97ee69
-
SHA512
2e17855c23b07cc89cb77ea52e0c484ecc5f6b11e9f18cbf284fa212af96260fc134dee5b8c1baa01bd2a9dbda8adc08c9530d6883e258d540c966fd6d0ea36a
-
SSDEEP
6144:TU0ynJVftfXpdETUMO8/v+EtR6iAY+HWEQnEP4h:TjcJVfBp6AY+V4+cl
Static task
static1
Behavioral task
behavioral1
Sample
f9e27ce5c1b0e497e58aabea89f89d71_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f9e27ce5c1b0e497e58aabea89f89d71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
f9e27ce5c1b0e497e58aabea89f89d71_JaffaCakes118
-
Size
371KB
-
MD5
f9e27ce5c1b0e497e58aabea89f89d71
-
SHA1
7777dad9a481ec8c33d535d5463d2ed88373509b
-
SHA256
19c7fedb2c1329fe5f392a2510793c98ab24e685974c3de1ebc18d395d97ee69
-
SHA512
2e17855c23b07cc89cb77ea52e0c484ecc5f6b11e9f18cbf284fa212af96260fc134dee5b8c1baa01bd2a9dbda8adc08c9530d6883e258d540c966fd6d0ea36a
-
SSDEEP
6144:TU0ynJVftfXpdETUMO8/v+EtR6iAY+HWEQnEP4h:TjcJVfBp6AY+V4+cl
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-