General
- Target jaffacakes118_e6747c35b7c9e867b02fe89933e6c2dc_JaffaCakes118
- Size 163KB
- Sample260915-t1e31aga29
- SHA256 cd2ba1fae8a267c91e9e4c9999c00f4066d582f9a75921802822d11722d1802e
- MD5 e6747c35b7c9e867b02fe89933e6c2dc
- SHA1 0764de5e8d75d88187d73438cba4cde958d9227c
- SHA512 fc0fd5c6ce15a131e11387fdadb858a04125f46d3fa09031dae9dfa8801d9cc69eb652a4c9ef6e34ab5781fb03175301ec8cb5237c6abd63e3ba1e8199ba00da
- SSDEEP 3072:P4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez488:QiI/PlY37ZLF4Ca6WABqBOvs7
- TLSH T193F3E0029A5109C2EC14C13327D7E98AAE13588BC66B7DE76478A57328B156D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e6747c35b7c9e867b02fe89933e6c2dc_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e6747c35b7c9e867b02fe89933e6c2dc_JaffaCakes118.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e6747c35b7c9e867b02fe89933e6c2dc_JaffaCakes118
- Size 163KB
- SHA256 cd2ba1fae8a267c91e9e4c9999c00f4066d582f9a75921802822d11722d1802e
- MD5 e6747c35b7c9e867b02fe89933e6c2dc
- SHA1 0764de5e8d75d88187d73438cba4cde958d9227c
- SHA512 fc0fd5c6ce15a131e11387fdadb858a04125f46d3fa09031dae9dfa8801d9cc69eb652a4c9ef6e34ab5781fb03175301ec8cb5237c6abd63e3ba1e8199ba00da
- SSDEEP 3072:P4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez488:QiI/PlY37ZLF4Ca6WABqBOvs7
- TLSH T193F3E0029A5109C2EC14C13327D7E98AAE13588BC66B7DE76478A57328B156D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Firseria
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Drops desktop.ini file(s)