Analysis
-
max time kernel
144s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-04-2024 07:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ece75db0182faf90a8077c52f58997c8_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ece75db0182faf90a8077c52f58997c8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
ece75db0182faf90a8077c52f58997c8_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
ece75db0182faf90a8077c52f58997c8
-
SHA1
9ecf7ca8a99973f4913def6cf8e520cda49b07d9
-
SHA256
59ec6ebf4feff0e5699fa7b25b36b49c309720b724d4bb24e48ad11afc22b7b7
-
SHA512
083d22f7b4cbb28ed8041ee484a26676e28a8ba26473c83144499b046e75b129996e2f3697f979c2d8f2d887bc0c2463267018900c393915f64475fcd1a46526
-
SSDEEP
24576:7LDn2x0Uq6KPRAIwLejIM3QwY64uH6CPq10JSHOp6RGqS5QvP09ZV7ZU8:vj25Ahwq3Qi4uH6CCkSHOwqV
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Windows\CurrentVersion\Run\svchost = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ece75db0182faf90a8077c52f58997c8_JaffaCakes118.exe" ece75db0182faf90a8077c52f58997c8_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2060 ece75db0182faf90a8077c52f58997c8_JaffaCakes118.exe