General
-
Target
9b8a00483a9fe819e5dcce16aec378ec_JaffaCakes118
-
Size
787KB
-
Sample
241125-pv5n9axjbt
-
MD5
9b8a00483a9fe819e5dcce16aec378ec
-
SHA1
deda07550438a64ee41fe709a8d8e6ff15446818
-
SHA256
0ebebd986c010922af108e86dad6ffbce1d2957d9313dd240bd6c3222571beb7
-
SHA512
e65301a6a88d40b8e665f30bbff9ceea4c1bfbb8a11ef679480ff6a46f8ef9c237d966c9abc9ab6054c956eec4d36e20e024376c1476feffc04b203c7c833cc2
-
SSDEEP
24576:wkvP+00dxNTTLnNdgrr67mwxHPAPc8Ghm5w:wK+0eZTLwrrALvAU8t6
Static task
static1
Behavioral task
behavioral1
Sample
9b8a00483a9fe819e5dcce16aec378ec_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
9b8a00483a9fe819e5dcce16aec378ec_JaffaCakes118
-
Size
787KB
-
MD5
9b8a00483a9fe819e5dcce16aec378ec
-
SHA1
deda07550438a64ee41fe709a8d8e6ff15446818
-
SHA256
0ebebd986c010922af108e86dad6ffbce1d2957d9313dd240bd6c3222571beb7
-
SHA512
e65301a6a88d40b8e665f30bbff9ceea4c1bfbb8a11ef679480ff6a46f8ef9c237d966c9abc9ab6054c956eec4d36e20e024376c1476feffc04b203c7c833cc2
-
SSDEEP
24576:wkvP+00dxNTTLnNdgrr67mwxHPAPc8Ghm5w:wK+0eZTLwrrALvAU8t6
-
Ardamax family
-
Ardamax main executable
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Drops file in System32 directory
-