General
- Target jaffacakes118_e640abffbc7e62ff185e613ff639cbf7_JaffaCakes118
- Size 165KB
- Sample260915-txem3aar9z
- SHA256 79a5e103a7eac8d79a38f691ec3c25b1e6e1046603dbf1789e1a9bb357faf7df
- MD5 e640abffbc7e62ff185e613ff639cbf7
- SHA1 aefd6e52d892622913274276f4db9c08dce2e6df
- SHA512 9998cb4e2628775e88869bb327adca18272569070aa070a29bd89eb58f6df25b547ee872f127519ed5abc05fa3371616f0d59df422a55a9e87e31c4161f06568
- SSDEEP 3072:u4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:diI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1EEF3D0028A5109D2EC14C53323D7E5966E13548BC6AB7DA72878E47328B126D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e640abffbc7e62ff185e613ff639cbf7_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e640abffbc7e62ff185e613ff639cbf7_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e640abffbc7e62ff185e613ff639cbf7_JaffaCakes118
- Size 165KB
- SHA256 79a5e103a7eac8d79a38f691ec3c25b1e6e1046603dbf1789e1a9bb357faf7df
- MD5 e640abffbc7e62ff185e613ff639cbf7
- SHA1 aefd6e52d892622913274276f4db9c08dce2e6df
- SHA512 9998cb4e2628775e88869bb327adca18272569070aa070a29bd89eb58f6df25b547ee872f127519ed5abc05fa3371616f0d59df422a55a9e87e31c4161f06568
- SSDEEP 3072:u4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:diI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1EEF3D0028A5109D2EC14C53323D7E5966E13548BC6AB7DA72878E47328B126D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)