General
- Target jaffacakes118_e74182154a5943bd3c27e87a20e33f9f_JaffaCakes118
- Size 165KB
- Sample260915-vf983s1dmc
- SHA256 c8525147f32886ef972f6aa8c95a171f657c9050530f33d63d50bb7c6f7276c3
- MD5 e74182154a5943bd3c27e87a20e33f9f
- SHA1 5e7334781e1610586e46a69ff55b13ae704209d8
- SHA512 30ba20c66dc4da57d33194b25e258c689dd08e30250f9ef9a66c8eff5b592cfaa96edd3294cee4110c90d116dd801ecfa7d14bbf6dd72bd1854a097b684ba6ad
- SSDEEP 3072:Q4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:PiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T11FF3E0428A5109D2EC14C53323D7E9966E13549BC6AB7DA72878E47328B126D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e74182154a5943bd3c27e87a20e33f9f_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e74182154a5943bd3c27e87a20e33f9f_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e74182154a5943bd3c27e87a20e33f9f_JaffaCakes118
- Size 165KB
- SHA256 c8525147f32886ef972f6aa8c95a171f657c9050530f33d63d50bb7c6f7276c3
- MD5 e74182154a5943bd3c27e87a20e33f9f
- SHA1 5e7334781e1610586e46a69ff55b13ae704209d8
- SHA512 30ba20c66dc4da57d33194b25e258c689dd08e30250f9ef9a66c8eff5b592cfaa96edd3294cee4110c90d116dd801ecfa7d14bbf6dd72bd1854a097b684ba6ad
- SSDEEP 3072:Q4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:PiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T11FF3E0428A5109D2EC14C53323D7E9966E13549BC6AB7DA72878E47328B126D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)