Overview
overview
7Static
static
382726817d6...18.exe
windows7-x64
382726817d6...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3CrashReport.exe
windows7-x64
3CrashReport.exe
windows10-2004-x64
7Encrypt.dll
windows7-x64
3Encrypt.dll
windows10-2004-x64
3Funshion.exe
windows7-x64
Funshion.exe
windows10-2004-x64
General
-
Target
82726817d69fed38dd91cf4a84df60b1_JaffaCakes118
-
Size
606KB
-
Sample
241031-kap1vasqgs
-
MD5
82726817d69fed38dd91cf4a84df60b1
-
SHA1
9be745770a3af3ea463b78a7948ab19d1ed4b831
-
SHA256
63eff52bd29c13e4605eb6ab66079cef29dc2ee61d37c8056fcdf06b49951d82
-
SHA512
987e29129283387600799545d53cd02373d3eb07eb3d55d63647a0425226f9965938728ba7fa02feb3ad483fc9afa4384ff863cf1534a2eee69b57de14e49231
-
SSDEEP
12288:8uTOIYBz9ZZfyHI1mqC+HVwqXSEK0ffxJVxHNy+sx79hjysjm:BTOrzpKo1mq9aNELf5JjNy+sxxhjysy
Static task
static1
Behavioral task
behavioral1
Sample
82726817d69fed38dd91cf4a84df60b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
82726817d69fed38dd91cf4a84df60b1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
CrashReport.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
CrashReport.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Encrypt.dll
Resource
win7-20241023-en
Behavioral task
behavioral10
Sample
Encrypt.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Funshion.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Funshion.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
82726817d69fed38dd91cf4a84df60b1_JaffaCakes118
-
Size
606KB
-
MD5
82726817d69fed38dd91cf4a84df60b1
-
SHA1
9be745770a3af3ea463b78a7948ab19d1ed4b831
-
SHA256
63eff52bd29c13e4605eb6ab66079cef29dc2ee61d37c8056fcdf06b49951d82
-
SHA512
987e29129283387600799545d53cd02373d3eb07eb3d55d63647a0425226f9965938728ba7fa02feb3ad483fc9afa4384ff863cf1534a2eee69b57de14e49231
-
SSDEEP
12288:8uTOIYBz9ZZfyHI1mqC+HVwqXSEK0ffxJVxHNy+sx79hjysjm:BTOrzpKo1mq9aNELf5JjNy+sxxhjysy
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
1d5c649dde35003a618b9679d5d71b92
-
SHA1
0409bbab3ab34f8c01289cdd847b4d1a32d05b18
-
SHA256
0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f
-
SHA512
b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9
-
SSDEEP
384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
4eff5fafd746f5decb93a44e3a3d570c
-
SHA1
a11aa7681b7e2df1c7f7492a127d332d1495ea8a
-
SHA256
cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
-
SHA512
cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
-
SSDEEP
192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
Score3/10 -
-
-
Target
CrashReport.exe
-
Size
176KB
-
MD5
effe2353b4f172b150a72ab8d797c2f4
-
SHA1
80837411bc56e12d1dafb506c50308c3dc692c28
-
SHA256
203c7c2db929e289bcb141977020ca559f7ce313b0b586064b9b909ed2c843a6
-
SHA512
4ad4661aa4fcd722ea971033dfa76aa7b6903804429bf188f8126e4ebf7ab42912ba452ce2d3338bc52514ef53578fdf5f80375c412640c1f8c40654e35df2f7
-
SSDEEP
3072:uBmJ7ZVWiKNPurOBTikcTBfQiIcF5xZ1UkF:us77WnNPiOJcTB4iIcZV
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
Encrypt.dll
-
Size
68KB
-
MD5
98086065c07a729b2ca234aa82433ef0
-
SHA1
f94532a1b7ca189ce706fea2d1cbc03400a18b5a
-
SHA256
b71893928fb85cd707d8b1197a0191c6e28796837d4ab3246fefcc3fcad1b16d
-
SHA512
b894026de9b962dd2891a224d3d71a2c3116036cb16328334210155d3f3ac54fb5092fa416cd4ec68d581ac3c87f4769efcc89efa334d0c3f870698d3152cc61
-
SSDEEP
768:M9MVMloL02y2aP8ny4X+RW5yBWVB+Tyy0FiNCMx5HzLZn:M9wMlygmX+RW5GWwyy0475T1
Score3/10 -
-
-
Target
Funshion.exe
-
Size
1.3MB
-
MD5
3c034b2e9ac91e4dd7e0637dc4670ac0
-
SHA1
75abd0dd8d817cf6ab40318dbd998948d4d047b4
-
SHA256
1cb0cd54483d3f16ec9cba5db3870faa008c22c31f469d98784df00402192156
-
SHA512
83db4075858c18e3d140e6fa36941b735872ce590affb105f97fd285f5312bf2c39c3a12099af4f7a209ecb57622381a4d48d0b5acadd5137067ad09720aea2d
-
SSDEEP
24576:mGSdSOoSGJFCT+y02sy3ZaAK4bcrqj+fu6Udht04+Mo48wtBKQ:SAJFCTllJaA1cr2+futV+MoutBKQ
Score1/10 -