Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 14:29

General

  • Target

    ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe

  • Size

    521KB

  • MD5

    ea32b21cde116b0ed957b3bad623ad74

  • SHA1

    c2ad4e16d32391de1082895c9c03efe062850b8a

  • SHA256

    1327d1eff1a4b96acf4c5293f911dd49b52adaa4343e486e39214d6b9c44906d

  • SHA512

    98dfc7d5d56caf803c0e82bc740f633abdfe036ae06e2a1cb255184f797402771a27a7788aee255c14bc1a7744be3ad5d77aa23ab1502e482bc9484f2b053a48

  • SSDEEP

    6144:1jPBAqlz8+IO/XgMJbKKy2RsZPMolhPaZGf4iV6vhD4WwxdpFtWGCj8AFz7n0NSW:gqlvXtb1y2iZPMo3PYGQY6Iew35x7

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2896

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \ProgramData\{a80664a2-7c21-f2b1-a806-664a27c29289}\ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe

          Filesize

          521KB

          MD5

          ea32b21cde116b0ed957b3bad623ad74

          SHA1

          c2ad4e16d32391de1082895c9c03efe062850b8a

          SHA256

          1327d1eff1a4b96acf4c5293f911dd49b52adaa4343e486e39214d6b9c44906d

          SHA512

          98dfc7d5d56caf803c0e82bc740f633abdfe036ae06e2a1cb255184f797402771a27a7788aee255c14bc1a7744be3ad5d77aa23ab1502e482bc9484f2b053a48

        • memory/2896-25-0x0000000000770000-0x0000000000771000-memory.dmp

          Filesize

          4KB

        • memory/2896-18-0x0000000000310000-0x0000000000311000-memory.dmp

          Filesize

          4KB

        • memory/2896-4-0x0000000000140000-0x0000000000141000-memory.dmp

          Filesize

          4KB

        • memory/2896-6-0x00000000002E0000-0x000000000030C000-memory.dmp

          Filesize

          176KB

        • memory/2896-5-0x0000000000160000-0x0000000000161000-memory.dmp

          Filesize

          4KB

        • memory/2896-7-0x0000000000220000-0x0000000000221000-memory.dmp

          Filesize

          4KB

        • memory/2896-9-0x0000000000230000-0x0000000000231000-memory.dmp

          Filesize

          4KB

        • memory/2896-30-0x0000000000720000-0x0000000000721000-memory.dmp

          Filesize

          4KB

        • memory/2896-31-0x00000000007B0000-0x00000000007B1000-memory.dmp

          Filesize

          4KB

        • memory/2896-29-0x0000000000710000-0x0000000000711000-memory.dmp

          Filesize

          4KB

        • memory/2896-28-0x0000000000170000-0x0000000000171000-memory.dmp

          Filesize

          4KB

        • memory/2896-27-0x00000000000F0000-0x00000000000F1000-memory.dmp

          Filesize

          4KB

        • memory/2896-26-0x0000000000780000-0x0000000000781000-memory.dmp

          Filesize

          4KB

        • memory/2896-0-0x0000000000020000-0x0000000000021000-memory.dmp

          Filesize

          4KB

        • memory/2896-3-0x0000000000130000-0x0000000000131000-memory.dmp

          Filesize

          4KB

        • memory/2896-24-0x0000000000760000-0x0000000000761000-memory.dmp

          Filesize

          4KB

        • memory/2896-16-0x00000000002C0000-0x00000000002C1000-memory.dmp

          Filesize

          4KB

        • memory/2896-21-0x0000000000730000-0x0000000000731000-memory.dmp

          Filesize

          4KB

        • memory/2896-20-0x0000000000700000-0x0000000000701000-memory.dmp

          Filesize

          4KB

        • memory/2896-19-0x0000000000180000-0x0000000000182000-memory.dmp

          Filesize

          8KB

        • memory/2896-23-0x0000000000750000-0x0000000000751000-memory.dmp

          Filesize

          4KB

        • memory/2896-17-0x00000000002D0000-0x00000000002D1000-memory.dmp

          Filesize

          4KB

        • memory/2896-22-0x0000000000740000-0x0000000000741000-memory.dmp

          Filesize

          4KB

        • memory/2896-15-0x0000000000270000-0x0000000000271000-memory.dmp

          Filesize

          4KB

        • memory/2896-14-0x0000000000260000-0x0000000000261000-memory.dmp

          Filesize

          4KB

        • memory/2896-13-0x0000000000250000-0x0000000000251000-memory.dmp

          Filesize

          4KB

        • memory/2896-11-0x0000000000240000-0x0000000000241000-memory.dmp

          Filesize

          4KB

        • memory/2896-2-0x0000000000120000-0x0000000000121000-memory.dmp

          Filesize

          4KB

        • memory/2896-1-0x0000000000030000-0x0000000000032000-memory.dmp

          Filesize

          8KB

        • memory/2896-39-0x00000000008C0000-0x00000000008C1000-memory.dmp

          Filesize

          4KB