General
- Target jaffacakes118_e701c8dbd6f57e6114dbcd1f289c355d_JaffaCakes118
- Size 165KB
- Sample260915-vbzxjsvv9p
- SHA256 45cbb8f02e60b25c0f2d342e0e047e7da0d8a32e76a93b8712810c36116f9bb9
- MD5 e701c8dbd6f57e6114dbcd1f289c355d
- SHA1 717a7701163bb2480562e6527459eff7bfe2ef05
- SHA512 a0400df5b362e4c29c51582db401e13f65b0afc1126cd1b9d78eacc444705161998cd9c71b82c29731e7c202e2cb413545926f15e91bb1608bea69b3424c8a1e
- SSDEEP 3072:04HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:7iI/PlY37ZLF4Ca6WABqBOvs
- TLSH T12EF3D0028A5109D2EC14C53327D7E99A6E13548BC6AB7DA72478E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e701c8dbd6f57e6114dbcd1f289c355d_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e701c8dbd6f57e6114dbcd1f289c355d_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e701c8dbd6f57e6114dbcd1f289c355d_JaffaCakes118
- Size 165KB
- SHA256 45cbb8f02e60b25c0f2d342e0e047e7da0d8a32e76a93b8712810c36116f9bb9
- MD5 e701c8dbd6f57e6114dbcd1f289c355d
- SHA1 717a7701163bb2480562e6527459eff7bfe2ef05
- SHA512 a0400df5b362e4c29c51582db401e13f65b0afc1126cd1b9d78eacc444705161998cd9c71b82c29731e7c202e2cb413545926f15e91bb1608bea69b3424c8a1e
- SSDEEP 3072:04HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:7iI/PlY37ZLF4Ca6WABqBOvs
- TLSH T12EF3D0028A5109D2EC14C53327D7E99A6E13548BC6AB7DA72478E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)