Overview
overview
6Static
static
3bd0ecf36f7...18.exe
windows7-x64
3bd0ecf36f7...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows7-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...ly.dll
windows7-x64
3$PLUGINSDI...ly.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3TCLSCOPY/T...ck.dll
windows7-x64
1TCLSCOPY/T...ck.dll
windows10-2004-x64
1TCLSCOPY/T...er.exe
windows7-x64
3TCLSCOPY/T...er.exe
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ip.dll
windows7-x64
3$PLUGINSDI...ip.dll
windows10-2004-x64
3TPHelper.exe
windows7-x64
6TPHelper.exe
windows10-2004-x64
6TPHelperBase.dll
windows7-x64
1TPHelperBase.dll
windows10-2004-x64
1TPWeb.exe
windows7-x64
1TPWeb.exe
windows10-2004-x64
1BugTrace.dll
windows7-x64
1BugTrace.dll
windows10-2004-x64
1Tenio/June.dll
windows7-x64
1Tenio/June.dll
windows10-2004-x64
1Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
04/04/2024, 16:28
Static task
static1
Behavioral task
behavioral1
Sample
bd0ecf36f7d24bbbb772fea073093fa7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd0ecf36f7d24bbbb772fea073093fa7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISPlugin.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISPlugin.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/NSISPlugin_JApply.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/NSISPlugin_JApply.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
TCLSCOPY/TenProtect/SecureCheck.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
TCLSCOPY/TenProtect/SecureCheck.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
TCLSCOPY/TenProtect/TP/TPHelper.Installer.exe
Resource
win7-20240319-en
Behavioral task
behavioral14
Sample
TCLSCOPY/TenProtect/TP/TPHelper.Installer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsUnzip.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsUnzip.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
TPHelper.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
TPHelper.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
TPHelperBase.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
TPHelperBase.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
TPWeb.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
TPWeb.exe
Resource
win10v2004-20240319-en
Behavioral task
behavioral29
Sample
BugTrace.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
BugTrace.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Tenio/June.dll
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
Tenio/June.dll
Resource
win10v2004-20240226-en
General
- Target bd0ecf36f7d24bbbb772fea073093fa7_JaffaCakes118.exe
- Size 15.7MB
- Sample240404-tysw3sda98
- SHA256 78ca941981136f8de181216770bc32154be849c0d172314744f96c0ce8df9ed1
- MD5 bd0ecf36f7d24bbbb772fea073093fa7
- SHA1 6cf9922e01bea949a542369b912da6547a87f1f8
- SHA512 5ef2cded0f6b032d2a2807e1567b20d0683b8d01f5acecac8c94fc95165b3b850d234d9d7d5235f5d92fda655fb028e24102adadd2d6aa674f871ec9b2f1ac04
- SSDEEP 393216:DgSoLYCSMS2VO14A74NOivZ6+fgbEUinQDkgSd:kSoLozMO1jqAjiISd
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).