General
- Target jaffacakes118_e72c08e2e31c22781daa3e43a8530b91_JaffaCakes118
- Size 165KB
- Sample260915-vennpage56
- SHA256 03abd0f04b76e3364a25645bda81ae9b22d57ebb8329a1d031f84b95f11b5cdc
- MD5 e72c08e2e31c22781daa3e43a8530b91
- SHA1 c4caa83282f0bbacb5612850cd3819ac202ffb57
- SHA512 4c00c8cfb8d58ac09d604ac2d549686207cbe7644249dd0769bd4dd2f7b32fec9347bb406486b248e4f499d668784e6c5d41a5582631dbef2bf33ca106e4e872
- SSDEEP 3072:34HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez44:oiI/PlY37ZLF4Ca6WABqBOvs4
- TLSH T1EBF3E0428A5109D2EC14C53323DBE9966E13548BC6AB7DA72478E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e72c08e2e31c22781daa3e43a8530b91_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e72c08e2e31c22781daa3e43a8530b91_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e72c08e2e31c22781daa3e43a8530b91_JaffaCakes118
- Size 165KB
- SHA256 03abd0f04b76e3364a25645bda81ae9b22d57ebb8329a1d031f84b95f11b5cdc
- MD5 e72c08e2e31c22781daa3e43a8530b91
- SHA1 c4caa83282f0bbacb5612850cd3819ac202ffb57
- SHA512 4c00c8cfb8d58ac09d604ac2d549686207cbe7644249dd0769bd4dd2f7b32fec9347bb406486b248e4f499d668784e6c5d41a5582631dbef2bf33ca106e4e872
- SSDEEP 3072:34HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez44:oiI/PlY37ZLF4Ca6WABqBOvs4
- TLSH T1EBF3E0428A5109D2EC14C53323DBE9966E13548BC6AB7DA72478E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)