General
-
Target
29aa9c4be6616e48f041f9f81dedb75e_JaffaCakes118
-
Size
672KB
-
Sample
241009-dj2bxasclc
-
MD5
29aa9c4be6616e48f041f9f81dedb75e
-
SHA1
4aa2643ae02f690c9b6220f422927d0956a4914c
-
SHA256
0176bb4179cbc06415449611666ee9035bcc564a554d449f5404363a05bfdfbb
-
SHA512
e911d3652e8e4dc55ecd625e8f589833d5a2f51b91f90374ce96dd4caf9ff76f6c2b3cdaab7896d9fa213f9d4d440505c1d292c5c1f2e163423026e822e2148a
-
SSDEEP
12288:8kQ4PIcBqHybSce3dhPq5nd+qsT1Z7LrA2rItSaItS/:85QIzHyuhiDyrProSaoS/
Static task
static1
Behavioral task
behavioral1
Sample
29aa9c4be6616e48f041f9f81dedb75e_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
29aa9c4be6616e48f041f9f81dedb75e_JaffaCakes118
-
Size
672KB
-
MD5
29aa9c4be6616e48f041f9f81dedb75e
-
SHA1
4aa2643ae02f690c9b6220f422927d0956a4914c
-
SHA256
0176bb4179cbc06415449611666ee9035bcc564a554d449f5404363a05bfdfbb
-
SHA512
e911d3652e8e4dc55ecd625e8f589833d5a2f51b91f90374ce96dd4caf9ff76f6c2b3cdaab7896d9fa213f9d4d440505c1d292c5c1f2e163423026e822e2148a
-
SSDEEP
12288:8kQ4PIcBqHybSce3dhPq5nd+qsT1Z7LrA2rItSaItS/:85QIzHyuhiDyrProSaoS/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-