Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 02:08
Static task
static1
Behavioral task
behavioral1
Sample
fe2ed76a199e3e7213ca266b3c05d9f0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe2ed76a199e3e7213ca266b3c05d9f0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe2ed76a199e3e7213ca266b3c05d9f0_JaffaCakes118.exe
-
Size
452KB
-
MD5
fe2ed76a199e3e7213ca266b3c05d9f0
-
SHA1
f2eff616ad2865ed0be4aaf46d9832d1a50189cf
-
SHA256
143393d2c44ea6fd38f7c96dd6138494eada4e2fa206c30764ebe804c72ae170
-
SHA512
593c314da82e8f2ce8be20c6e417461876ffd6d21e2fe6349cafaeb1b5504ff015c22758acb0f1c455093b06b539712ce5ef5546db67c57c94a0c955ed3a93d7
-
SSDEEP
6144:ja+TodlGtN2juQvvkksGJ/WdXjkN+d1fwLnmNkJVUA33E0D5wj7WZ/NXeIa4VNtK:jkdGQvvcOkXjODnPUA3hwWB7ODTg05
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fe2ed76a199e3e7213ca266b3c05d9f0_JaffaCakes118.lnk fe2ed76a199e3e7213ca266b3c05d9f0_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 2200 fe2ed76a199e3e7213ca266b3c05d9f0_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{4697d4c1-ece1-eb07-4697-7d4c1ece5307}\fe2ed76a199e3e7213ca266b3c05d9f0_JaffaCakes118.exe
Filesize452KB
MD5fe2ed76a199e3e7213ca266b3c05d9f0
SHA1f2eff616ad2865ed0be4aaf46d9832d1a50189cf
SHA256143393d2c44ea6fd38f7c96dd6138494eada4e2fa206c30764ebe804c72ae170
SHA512593c314da82e8f2ce8be20c6e417461876ffd6d21e2fe6349cafaeb1b5504ff015c22758acb0f1c455093b06b539712ce5ef5546db67c57c94a0c955ed3a93d7