Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
03-05-2024 09:15
Static task
static1
Behavioral task
behavioral1
Sample
102b355e80de5598163d3e4bc1a5a3bf_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
102b355e80de5598163d3e4bc1a5a3bf_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
102b355e80de5598163d3e4bc1a5a3bf_JaffaCakes118.exe
-
Size
315KB
-
MD5
102b355e80de5598163d3e4bc1a5a3bf
-
SHA1
434376772737b1bca5d0382d9e730fcfd9d43def
-
SHA256
167fb2ad19c1c50122eae00e602a3eaa35797ab146a39b4f85bfb04ff9bd47e3
-
SHA512
90c3c6c65e5ec66396f3ad2d0584fffd82dacadd71ea5445d28e305b4923cbf7f99c3d9be3001eb40aaa8f3eb92c7e61888b25e26c3f372bc46728cfd8f311f5
-
SSDEEP
6144:OJeR7eAQiLxzgf5XQAQRcd96odbBEhnNit:OJI7vFxzuvj9F5ChNit
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\BookKeep.job 102b355e80de5598163d3e4bc1a5a3bf_JaffaCakes118.exe