Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 00:06
Behavioral task
behavioral1
Sample
f6de3b6a3051f61646b570d95bda6519_JaffaCakes118.exe
Resource
win7-20240215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f6de3b6a3051f61646b570d95bda6519_JaffaCakes118.exe
Resource
win10v2004-20240412-en
2 signatures
150 seconds
General
-
Target
f6de3b6a3051f61646b570d95bda6519_JaffaCakes118.exe
-
Size
190KB
-
MD5
f6de3b6a3051f61646b570d95bda6519
-
SHA1
612987dc0636b4d411dc7f11eee554f72d95a84b
-
SHA256
d48ae13eb5823520fadd98bf6bb2f23b214d2e0da5b13b89962d5c2d9cd19c1a
-
SHA512
a9aa6284171329d9bb5cb83195e881f33b84f9084c64826f3dbda188b8b154fcec6a469f6687f7a062726570b0aed2ca2aebb3afd14a66a7f625f5da0b234488
-
SSDEEP
3072:5Eotq5/xTj2oEnmVdncH/NjGGQLVjMY/Oi/fYj2lGT0k8YFT9lzYTsKeK7xAx7b+:Rtq/R2vmCNj/QdHgRok8YFDziheiAx3+
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1624-0-0x0000000000400000-0x000000000049C000-memory.dmp upx behavioral1/memory/1624-5-0x0000000000400000-0x000000000049C000-memory.dmp upx behavioral1/memory/1624-6-0x0000000000400000-0x000000000049C000-memory.dmp upx behavioral1/memory/1624-7-0x0000000000400000-0x000000000049C000-memory.dmp upx -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\WINDOWS\tempst.exe f6de3b6a3051f61646b570d95bda6519_JaffaCakes118.exe File opened for modification C:\WINDOWS\tempst.exe f6de3b6a3051f61646b570d95bda6519_JaffaCakes118.exe