Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 01:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fbaadad3f5162dc9250dddf44c0a22fa_JaffaCakes118.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fbaadad3f5162dc9250dddf44c0a22fa_JaffaCakes118.exe
Resource
win10v2004-20240412-en
2 signatures
150 seconds
General
-
Target
fbaadad3f5162dc9250dddf44c0a22fa_JaffaCakes118.exe
-
Size
44KB
-
MD5
fbaadad3f5162dc9250dddf44c0a22fa
-
SHA1
09225f9b2171c3dee0eafcdbdc199e9706fa416c
-
SHA256
188cef0bd009b0a13ee52a3ae7ac19015ec1a13de82aaf0cd369ff57bba9b899
-
SHA512
0fd88b5dc7f9e64e2f0a7ce8d7e97916c28e511857e91cb19e18c88ef92d4f96e5b8f47a86477e4378e3b884d5017d83aec3036a184dad0c9d63fe8d857d54c1
-
SSDEEP
768:xtXRUjzoUodeGGlwowPT0pNk21qlD992BxJ0BKCs:bhUjcUodeGG044ts
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\fbaadad3f5162dc9250dddf44c0a22fa_JaffaCakes118 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\fbaadad3f5162dc9250dddf44c0a22fa_JaffaCakes118.exe" fbaadad3f5162dc9250dddf44c0a22fa_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2232 fbaadad3f5162dc9250dddf44c0a22fa_JaffaCakes118.exe