e8f26ef7eb9c4ce0f3226ba6371f4f2a3b0132d4fc41e0f1a5ccb71bcd586d0e

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/04/2024, 14:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
Size

1.0MB
MD5

f13abda602a42c015f93ced692b750d7
SHA1

b1099f5b66c5cfc49f2a040f6390820c69d4de5f
SHA256

e8f26ef7eb9c4ce0f3226ba6371f4f2a3b0132d4fc41e0f1a5ccb71bcd586d0e
SHA512

b637b65afb35514ce1933adf43eeb8171b78e90a6c16074cce729e6395671edfd57dabf88040021ce061f491fa7c712b65ae6b4c922cecea3f30b66fae2b6ba5
SSDEEP

24576:+nL9sjV5fTqnpwFVwIvmtnSJ1+2j86HEgUWbc:+nLejV1WnpvnSD+2j86HEgUWbc

Score

6^/10

Malware Config

Signatures

Drops desktop.ini file(s) 6 IoCs

description	ioc	Process
File created	\??\c:\$Recycle.Bin\S-1-5-21-330940541-141609230-1670313778-1000\desktop.ini	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\$Recycle.Bin\S-1-5-21-330940541-141609230-1670313778-1000\desktop.ini	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\desktop.ini	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\desktop.ini	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\de-DE\msadcer.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\he.txt	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\es-ES\FlickLearningWizard.exe.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\HideImport.jfif	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\charsets.jar	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\nn.txt	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\iexplore.exe	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\System\Ole DB\ja-JP\msdasqlr.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\db\lib\derby.war	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\libxslt.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\OmdProject.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\zh-tw.txt	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\perfcore.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\ro.txt	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Internet Explorer\DiagnosticsTap.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\zip.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\jsprofilerui.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DissolveNoise.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.bat	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\System\msadc\fr-FR\msadcfr.dll.mui	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\OmdProject.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\sr-spl.txt	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png	f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f13abda602a42c015f93ced692b750d7_JaffaCakes118.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

Filesize
6.6MB

MD5
f383887b515a6f12c03895863ca9f7e8

SHA1
a672d3db165594b6f538c17072dc92f2bc576693

SHA256
93819fd85dde2f15dfbe11727dc28832f366a5e882ccc7601736feb52eb3b07b

SHA512
931c75d18df7570ab6876f084b97109022b25661e00fc8f6c03020bdabd7b76831bad8be93047c1f3c119216014763ed8291a8a40b41aeea8faab9a93f52f76f

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe

Filesize
5B

MD5
b5b682b742431a52ea8b17c72ad9c572

SHA1
326320f469235708c59f678c9a7357dca552d306

SHA256
30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

SHA512
4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

Download Submit
C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer

Filesize
5KB

MD5
6b99099c6a9b959f824e420676fe3dc8

SHA1
ba9e3b5f2f7f710d263272019be5bf5db33bf614

SHA256
34d5d8dc208ef8c73bb46fb3002fa22b8954d52a4e53be3c56b9801aeab56918

SHA512
dfe061ddec4106e68c8ea789009b0e6bf7d27072bebd0bdb724e4ccadd215b9122b04198bbc362753e2b35af16d993ddf89b44b29bb79c0e7a16eeb97f3b3d26

Download Submit
memory/2228-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2228-35-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2228-238-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2228-558-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads