Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
01-05-2024 20:18
Static task
static1
Behavioral task
behavioral1
Sample
0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe
-
Size
369KB
-
MD5
0cc08f1337a21055109f341e3c7d9578
-
SHA1
e7141af8e4ae501d0d6ffe4220d27a74acc1867a
-
SHA256
180fdd8331e4fa545e2788ab914dad9b7986e7555e3e2359714c403f7261c866
-
SHA512
04ed3bda6eb5035f7753c1a8cb0d4463a3918c7ea7662eb84152cf0099323cdc3468cf24e2a1a205b8cef1788e31b0565723da82722ad3e2465c346e48db0d0f
-
SSDEEP
6144:17kzwblkqgzBmhFKQLZDhfYVxRnfyemXGjucHjKa406GmVvRABsXz7W9XUpK:5+wbcBm7ZdfYVugbJgX/RK
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.lnk 0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 1732 0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{27290a45-8acd-482b-2729-90a458ac2916}\0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe
Filesize369KB
MD50cc08f1337a21055109f341e3c7d9578
SHA1e7141af8e4ae501d0d6ffe4220d27a74acc1867a
SHA256180fdd8331e4fa545e2788ab914dad9b7986e7555e3e2359714c403f7261c866
SHA51204ed3bda6eb5035f7753c1a8cb0d4463a3918c7ea7662eb84152cf0099323cdc3468cf24e2a1a205b8cef1788e31b0565723da82722ad3e2465c346e48db0d0f