Analysis
-
max time kernel
55s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
27-04-2024 22:38
Static task
static1
Behavioral task
behavioral1
Sample
03c95827e71250a7aa7f16d115ebc9ca_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
03c95827e71250a7aa7f16d115ebc9ca_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
03c95827e71250a7aa7f16d115ebc9ca_JaffaCakes118.exe
-
Size
378KB
-
MD5
03c95827e71250a7aa7f16d115ebc9ca
-
SHA1
ddeebf3bb5bbe3ac9801c1f6a0f48d6c05959f74
-
SHA256
a6c90d5eed643f83eff48c9c16cb4ffbcf56566a6adfe74161b0cb711981fc2c
-
SHA512
f66dc6bdb880721bfca577060f0a90daede5827eca3df9bfbc0eedc014de5027682efef1f4e7fd4c0310e237013dda4f27fc458c67ecb5225c14caa6a25527e2
-
SSDEEP
6144:cnz/rFH4WhEWnmIgM2euYlUinOhLPnKlMbbsSocQxPOscF4oDQ1JZiId:U5H4WhEWnUc2/KlMaH0Id
Malware Config
Signatures
-
Drops startup file 1 IoCs
Processes:
03c95827e71250a7aa7f16d115ebc9ca_JaffaCakes118.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\03c95827e71250a7aa7f16d115ebc9ca_JaffaCakes118.lnk 03c95827e71250a7aa7f16d115ebc9ca_JaffaCakes118.exe -
Drops file in Windows directory 1 IoCs
Processes:
03c95827e71250a7aa7f16d115ebc9ca_JaffaCakes118.exedescription ioc process File created C:\Windows\Tasks\Bidaily Synchronize Task.job 03c95827e71250a7aa7f16d115ebc9ca_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).