Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
18-04-2024 23:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe
-
Size
29KB
-
MD5
f8fe00b09e46c6e8bdc1af0da363471c
-
SHA1
4cc3bff4c212594f0c74679cb9765c77d18a7a59
-
SHA256
206dab4798b4c3fb069b3127c849c0ef955f8f27150d7fa7b233ce5ac636254f
-
SHA512
8603b4207ba8d2e123f185af2ed1a022d8ca49521d28b399a42ecc707a863376ab5e1d6bc60ee47014529aa91f9aa6ca8c0033c6ac94978e0b011b4ac16dbdbe
-
SSDEEP
384:nSghw8ACCVXEOQWzVXiD9qBBDtFKii89GZYHJbKBP08wLTJS27hFNe+NeUZ:nSg28BrWViD9eDtFK3ERH5Kt0xS
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 15 IoCs
pid Process 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe 2216 f8fe00b09e46c6e8bdc1af0da363471c_JaffaCakes118.exe