General
- Target jaffacakes118_e6ca9710868fb6e7e2eea9fa2ab69b96_JaffaCakes118
- Size 165KB
- Sample260915-t78c5agb93
- SHA256 9ac1f826b425b4ad3ab432abab996eb5d8f04c943e93f786c9930acc978d9ec0
- MD5 e6ca9710868fb6e7e2eea9fa2ab69b96
- SHA1 073ec3ffed5d65c6e3f60c3fe102ec115c230a10
- SHA512 8e63dd6c89b7a35281e478693e450c722f700613df625e30ebea862990ceb12028c0351b4d566d4176fe0801f591656344711212a790fd61fdbc72d68972d638
- SSDEEP 3072:V4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:miI/PlY37ZLF4Ca6WABqBOvs
- TLSH T179F3D0028A5109D2EC14C53327D7E9966E13589BC6AB7DA72478E47328B126D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e6ca9710868fb6e7e2eea9fa2ab69b96_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e6ca9710868fb6e7e2eea9fa2ab69b96_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e6ca9710868fb6e7e2eea9fa2ab69b96_JaffaCakes118
- Size 165KB
- SHA256 9ac1f826b425b4ad3ab432abab996eb5d8f04c943e93f786c9930acc978d9ec0
- MD5 e6ca9710868fb6e7e2eea9fa2ab69b96
- SHA1 073ec3ffed5d65c6e3f60c3fe102ec115c230a10
- SHA512 8e63dd6c89b7a35281e478693e450c722f700613df625e30ebea862990ceb12028c0351b4d566d4176fe0801f591656344711212a790fd61fdbc72d68972d638
- SSDEEP 3072:V4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:miI/PlY37ZLF4Ca6WABqBOvs
- TLSH T179F3D0028A5109D2EC14C53327D7E9966E13589BC6AB7DA72478E47328B126D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Firseria
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Drops desktop.ini file(s)