General
-
Target
3859f2ffd142b834cc60e510494be7bf_JaffaCakes118
-
Size
3.0MB
-
Sample
241012-emt8fawhnq
-
MD5
3859f2ffd142b834cc60e510494be7bf
-
SHA1
24f3372136c25beff4959464bf97412c2f2b9031
-
SHA256
a6eade40d178183a1119a3ef17c47fb2877efd9390e49076906c6b348c137232
-
SHA512
b762dedb616cfb00bcecef8b2c149f4677e32383af9228975c00f77c3b5e9a91b69c5c367303b7fd9041eb6b459c2d330466c60813bdfdc442551909084850fa
-
SSDEEP
49152:SgCh1LGumhuW+5S0z0pEhd/l0mWKp719Qq3yobleQD80gboI5/4X0W0z0pEhd/l+:HCPSpED/ppLh3ScE4X0ypED/pq
Static task
static1
Behavioral task
behavioral1
Sample
3859f2ffd142b834cc60e510494be7bf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3859f2ffd142b834cc60e510494be7bf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
3859f2ffd142b834cc60e510494be7bf_JaffaCakes118
-
Size
3.0MB
-
MD5
3859f2ffd142b834cc60e510494be7bf
-
SHA1
24f3372136c25beff4959464bf97412c2f2b9031
-
SHA256
a6eade40d178183a1119a3ef17c47fb2877efd9390e49076906c6b348c137232
-
SHA512
b762dedb616cfb00bcecef8b2c149f4677e32383af9228975c00f77c3b5e9a91b69c5c367303b7fd9041eb6b459c2d330466c60813bdfdc442551909084850fa
-
SSDEEP
49152:SgCh1LGumhuW+5S0z0pEhd/l0mWKp719Qq3yobleQD80gboI5/4X0W0z0pEhd/l+:HCPSpED/ppLh3ScE4X0ypED/pq
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-