General
- Target jaffacakes118_e6ed8f5a115deed2d4e5b88671946a5a_JaffaCakes118
- Size 165KB
- Sample260915-varvjsbp5z
- SHA256 fea9405b5f02ead48e8542d6a5249076e0fd974bed78ec1f8e1d8a502944673f
- MD5 e6ed8f5a115deed2d4e5b88671946a5a
- SHA1 cd240bb511af72132fcb22a27a8e186dc0990c5a
- SHA512 3f333c4d56659b19002ec436cf877800dae20cd52b93e84cb83955cb5b68e554ddffa0c3c7bfaec0843e5701b520e4a999fcc7b0e7eca6f6dc34a674bec73608
- SSDEEP 3072:K4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:xiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1EAF3D0028A5109D2EC14C53327D7E9966E13548BC6AB7DA72878E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e6ed8f5a115deed2d4e5b88671946a5a_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e6ed8f5a115deed2d4e5b88671946a5a_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e6ed8f5a115deed2d4e5b88671946a5a_JaffaCakes118
- Size 165KB
- SHA256 fea9405b5f02ead48e8542d6a5249076e0fd974bed78ec1f8e1d8a502944673f
- MD5 e6ed8f5a115deed2d4e5b88671946a5a
- SHA1 cd240bb511af72132fcb22a27a8e186dc0990c5a
- SHA512 3f333c4d56659b19002ec436cf877800dae20cd52b93e84cb83955cb5b68e554ddffa0c3c7bfaec0843e5701b520e4a999fcc7b0e7eca6f6dc34a674bec73608
- SSDEEP 3072:K4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:xiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1EAF3D0028A5109D2EC14C53327D7E9966E13548BC6AB7DA72878E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)