General
-
Target
138b8238e0799c627e8c240e22a2c1c0_JaffaCakes118
-
Size
161KB
-
Sample
241004-qsr6tawglk
-
MD5
138b8238e0799c627e8c240e22a2c1c0
-
SHA1
931f8255401256c88b0494699443caab8c01ae65
-
SHA256
a4683441c5224e36ff617323acf9f627e5717a41ff3584f7bceec7b0680ea96f
-
SHA512
4d346959a1faa4ce30d46475fd5b3c6e0423ebdc4efef777d1df545b7b669f103e8d2f312cd8e1d6042ca8e6d7f4c43c608e039f54c64bab3d86d77fa75df616
-
SSDEEP
3072:FYP2XerzhOUxu/XUtauF8iJkZPB6jQxwv8YC5z41LND:Fu2urzh9xu/XkauF5JgPB68xvF5zel
Static task
static1
Behavioral task
behavioral1
Sample
138b8238e0799c627e8c240e22a2c1c0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
138b8238e0799c627e8c240e22a2c1c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
138b8238e0799c627e8c240e22a2c1c0_JaffaCakes118
-
Size
161KB
-
MD5
138b8238e0799c627e8c240e22a2c1c0
-
SHA1
931f8255401256c88b0494699443caab8c01ae65
-
SHA256
a4683441c5224e36ff617323acf9f627e5717a41ff3584f7bceec7b0680ea96f
-
SHA512
4d346959a1faa4ce30d46475fd5b3c6e0423ebdc4efef777d1df545b7b669f103e8d2f312cd8e1d6042ca8e6d7f4c43c608e039f54c64bab3d86d77fa75df616
-
SSDEEP
3072:FYP2XerzhOUxu/XUtauF8iJkZPB6jQxwv8YC5z41LND:Fu2urzh9xu/XkauF5JgPB68xvF5zel
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-