Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 11:08
Static task
static1
Behavioral task
behavioral1
Sample
f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe
-
Size
32KB
-
MD5
f0e9bfebb7844c590c8755a4456d445b
-
SHA1
88d27c752d300ae97e8adacc714fdbdd3690ce35
-
SHA256
3d615887830cdb83ea830f9d1f56e3b7f74c213219098423ee5ffa709dd48339
-
SHA512
57e239ddb56c288f3758d9030b57a9d62f9b4eeb864e86b4f26f16ca276286fbda18c6562156416ca8cb902cc42821739ff2436a7a87cd3dca71b0d0d992b5c1
-
SSDEEP
192:dTL6bN9lgbNOJW8SbNq9xzrwoHWCclmiSXe2iuVVNugP3n9bNqYbNOJW8ybN9l:4bHlgbQSbo/HH3n9boYbQybHl
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2610426812-2871295383-373749122-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-2610426812-2871295383-373749122-1000\Software\Microsoft\Internet Explorer\Main f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-2610426812-2871295383-373749122-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2236 f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe 2236 f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe 2236 f0e9bfebb7844c590c8755a4456d445b_JaffaCakes118.exe