Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
30-04-2024 05:38
Static task
static1
Behavioral task
behavioral1
Sample
0924981b861e4aa2972d662d4e410f3d_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0924981b861e4aa2972d662d4e410f3d_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0924981b861e4aa2972d662d4e410f3d_JaffaCakes118.exe
-
Size
258KB
-
MD5
0924981b861e4aa2972d662d4e410f3d
-
SHA1
a243c0e235b8a5c9e5fed506f966faac2ac1bfca
-
SHA256
109f57e72e3c48846b78ed47dccd49e6b09140d19bec8dc2184af6d12367887d
-
SHA512
e3848d798504f0bc1d4b2ffb871374a059fccdd96da9ab628a86d0fa13470c9f3ff49cafeafe55395ad75f5b2c4d08d756205af587d9051aa492d16161254071
-
SSDEEP
6144:XLiiwQMlt3UpiHtpwh9qwOkJHvls9Vo6yn1AA:hMb3UpMDwhwNkNlSo6yn1AA
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 0924981b861e4aa2972d662d4e410f3d_JaffaCakes118.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\Disk\Enum 0924981b861e4aa2972d662d4e410f3d_JaffaCakes118.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\TouchDetector.job 0924981b861e4aa2972d662d4e410f3d_JaffaCakes118.exe