Analysis

  • max time kernel
    55s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/04/2024, 06:24

General

  • Target

    029feb5e88adad9b4a0f21c5f611a45b_JaffaCakes118.exe

  • Size

    369KB

  • MD5

    029feb5e88adad9b4a0f21c5f611a45b

  • SHA1

    3bf46b937d98562556c844f4aecc604dc1be0534

  • SHA256

    c6f130d77a0864b791b56a769bfea9748ac782593076736bf388de4136710f60

  • SHA512

    0a71bce654e7b07e175f1a829813d77cdb23e7888fc2a2290df7f8d9140ff571bf6895687afc670d4eac70328270ba86699217f4a4c31742c348172534ee2feb

  • SSDEEP

    6144:CEG9Jn9+SfCWIw/8NyjPJ7/OOqL95ha41iRqMkf7VPNzSZgxqXzZbiGBQ8JrnX6R:RG9doYAyjB7IlaRwjCw9J9

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\029feb5e88adad9b4a0f21c5f611a45b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\029feb5e88adad9b4a0f21c5f611a45b_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    PID:1916

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1916-0-0x00000000004A0000-0x00000000004A1000-memory.dmp

          Filesize

          4KB

        • memory/1916-2-0x00000000004C0000-0x00000000004C1000-memory.dmp

          Filesize

          4KB

        • memory/1916-1-0x00000000004B0000-0x00000000004B2000-memory.dmp

          Filesize

          8KB

        • memory/1916-16-0x0000000000E10000-0x0000000000E11000-memory.dmp

          Filesize

          4KB

        • memory/1916-15-0x00000000007F0000-0x00000000007F1000-memory.dmp

          Filesize

          4KB

        • memory/1916-14-0x00000000007E0000-0x00000000007E1000-memory.dmp

          Filesize

          4KB

        • memory/1916-13-0x00000000007D0000-0x00000000007D1000-memory.dmp

          Filesize

          4KB

        • memory/1916-12-0x00000000007C0000-0x00000000007C1000-memory.dmp

          Filesize

          4KB

        • memory/1916-25-0x0000000000E20000-0x0000000000E21000-memory.dmp

          Filesize

          4KB

        • memory/1916-24-0x0000000000E50000-0x0000000000E51000-memory.dmp

          Filesize

          4KB

        • memory/1916-23-0x0000000000E40000-0x0000000000E41000-memory.dmp

          Filesize

          4KB

        • memory/1916-22-0x0000000000E30000-0x0000000000E31000-memory.dmp

          Filesize

          4KB

        • memory/1916-21-0x0000000000770000-0x0000000000772000-memory.dmp

          Filesize

          8KB

        • memory/1916-17-0x0000000000DE0000-0x0000000000E0C000-memory.dmp

          Filesize

          176KB

        • memory/1916-11-0x00000000007B0000-0x00000000007B1000-memory.dmp

          Filesize

          4KB

        • memory/1916-32-0x0000000000750000-0x0000000000751000-memory.dmp

          Filesize

          4KB

        • memory/1916-31-0x0000000000740000-0x0000000000741000-memory.dmp

          Filesize

          4KB

        • memory/1916-30-0x0000000000730000-0x0000000000731000-memory.dmp

          Filesize

          4KB

        • memory/1916-33-0x0000000000EA0000-0x0000000000EA1000-memory.dmp

          Filesize

          4KB

        • memory/1916-29-0x0000000000720000-0x0000000000721000-memory.dmp

          Filesize

          4KB

        • memory/1916-10-0x00000000007A0000-0x00000000007A1000-memory.dmp

          Filesize

          4KB

        • memory/1916-9-0x0000000000790000-0x0000000000791000-memory.dmp

          Filesize

          4KB

        • memory/1916-8-0x0000000000780000-0x0000000000781000-memory.dmp

          Filesize

          4KB

        • memory/1916-7-0x0000000000710000-0x0000000000711000-memory.dmp

          Filesize

          4KB

        • memory/1916-6-0x0000000000700000-0x0000000000701000-memory.dmp

          Filesize

          4KB

        • memory/1916-5-0x00000000006F0000-0x00000000006F1000-memory.dmp

          Filesize

          4KB

        • memory/1916-4-0x00000000006E0000-0x00000000006E1000-memory.dmp

          Filesize

          4KB

        • memory/1916-3-0x0000000000590000-0x0000000000591000-memory.dmp

          Filesize

          4KB