General
-
Target
1f2bc22634d3d30a45879cfacf171c67_JaffaCakes118
-
Size
618KB
-
Sample
240702-nm473sthpm
-
MD5
1f2bc22634d3d30a45879cfacf171c67
-
SHA1
f00d75f529c7c53c9f5a676fcd2c464149fe9e92
-
SHA256
81f8d51c8e5571fac8dc824ca41b4d913bf6ee8165371116ba5effbd25081d4c
-
SHA512
4675887e1398fa79720e56a51f90ed2730fa06b9a098d233c7f121b8e5f6e8ccaa582a96c0ffa1afe428cae794a2f1802322bbb8e485e42ff65886067546738d
-
SSDEEP
6144:tu5DP/fSeORzGD2c9fueTJ8teS/5YPMDdwuMks2itNnAfFuNuNuNuNuNufks2itB:OD/s6D2c9fuCejBuwdaOfrOfO
Static task
static1
Behavioral task
behavioral1
Sample
1f2bc22634d3d30a45879cfacf171c67_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1f2bc22634d3d30a45879cfacf171c67_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
1f2bc22634d3d30a45879cfacf171c67_JaffaCakes118
-
Size
618KB
-
MD5
1f2bc22634d3d30a45879cfacf171c67
-
SHA1
f00d75f529c7c53c9f5a676fcd2c464149fe9e92
-
SHA256
81f8d51c8e5571fac8dc824ca41b4d913bf6ee8165371116ba5effbd25081d4c
-
SHA512
4675887e1398fa79720e56a51f90ed2730fa06b9a098d233c7f121b8e5f6e8ccaa582a96c0ffa1afe428cae794a2f1802322bbb8e485e42ff65886067546738d
-
SSDEEP
6144:tu5DP/fSeORzGD2c9fueTJ8teS/5YPMDdwuMks2itNnAfFuNuNuNuNuNufks2itB:OD/s6D2c9fuCejBuwdaOfrOfO
Score10/10-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-