Overview
overview
8Static
static
3JaffaCakes...e0.exe
windows7-x64
3JaffaCakes...e0.exe
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...lp.dll
windows7-x64
3$PLUGINSDI...lp.dll
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3OpenCandy/...lp.dll
windows7-x64
3OpenCandy/...lp.dll
windows10-2004-x64
7SWFGen.dll
windows7-x64
3SWFGen.dll
windows10-2004-x64
3flash4dv6full.exe
windows7-x64
7flash4dv6full.exe
windows10-2004-x64
7install_fl..._x.exe
windows7-x64
8install_fl..._x.exe
windows10-2004-x64
8$PLUGINSDI...ay.dll
windows7-x64
3$PLUGINSDI...ay.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Flash9f.dll
windows7-x64
3Flash9f.dll
windows10-2004-x64
3FlashUtil9f.exe
windows7-x64
3FlashUtil9f.exe
windows10-2004-x64
3Analysis
-
max time kernel
104s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
20/03/2025, 02:54
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8101be7a724ddef1fe82800468e42ee0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8101be7a724ddef1fe82800468e42ee0.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral11
Sample
OpenCandy/OCSetupHlp.dll
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
OpenCandy/OCSetupHlp.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral13
Sample
SWFGen.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
SWFGen.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral15
Sample
flash4dv6full.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
flash4dv6full.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral17
Sample
install_flash_player_active_x.exe
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
install_flash_player_active_x.exe
Resource
win10v2004-20250313-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20250207-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/fpinstall.dll
Resource
win7-20241010-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/fpinstall.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral29
Sample
Flash9f.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Flash9f.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral31
Sample
FlashUtil9f.exe
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
FlashUtil9f.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_8101be7a724ddef1fe82800468e42ee0.exe
-
Size
10.8MB
-
MD5
8101be7a724ddef1fe82800468e42ee0
-
SHA1
dc34eaeebf1dd7c47dc6a89d118c2ed719bf256b
-
SHA256
2db2257ad689c4df62b1b53df462cc1200136a43e2d500e3a2331965d3248890
-
SHA512
adde0e9c1946c5c457c2b630dbf00e6b0269e7a3128e61cc6c11a1360ed68ae76cd4a87924d73d86201067c32d9b6759d6db2c9db3fda469b9b529ddc041e2f8
-
SSDEEP
196608:rDv9Y//yWUpr3U6rcUoqsNlSEb7z8IsSKebhQO5cz53m/7/sxthiYdK:rD1Y/aWGC1qelbZsShQOY2/7/4h3k
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_8101be7a724ddef1fe82800468e42ee0.exe