Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-05-2024 02:16

General

  • Target

    113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe

  • Size

    370KB

  • MD5

    113723679d50b8976a967ae4db6ebdc7

  • SHA1

    4fd45b6e07c6a276b6d84a1261a8711fd92d998b

  • SHA256

    67a996d9f2b7c1ad3f1bea3788c15f01a6dec4bf0d9aefaca399b9ab1f66f2af

  • SHA512

    313057f8ae5a81fb3d5d75954830568d76c237999cd7097cf6fed8a2e228c6543e775f980ca93c2f113b43571ea8597e6853b460f4aaa64481e6c2f3ec42dc97

  • SSDEEP

    6144:uNb2O6bZ6McUBJrcLVNUoVazkiwYZgBS7MXzpmzeJ2h+0mGJk0ctq3ldqsEtT:u5v6F6Mc/ZAGS7G+xEtT

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{3bf665ce-d8e7-b402-3bf6-665ced8e973b}\113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe

    Filesize

    370KB

    MD5

    113723679d50b8976a967ae4db6ebdc7

    SHA1

    4fd45b6e07c6a276b6d84a1261a8711fd92d998b

    SHA256

    67a996d9f2b7c1ad3f1bea3788c15f01a6dec4bf0d9aefaca399b9ab1f66f2af

    SHA512

    313057f8ae5a81fb3d5d75954830568d76c237999cd7097cf6fed8a2e228c6543e775f980ca93c2f113b43571ea8597e6853b460f4aaa64481e6c2f3ec42dc97

  • memory/2808-3-0x0000000000170000-0x0000000000171000-memory.dmp

    Filesize

    4KB

  • memory/2808-14-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2808-28-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/2808-6-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/2808-23-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/2808-13-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2808-12-0x0000000000210000-0x0000000000211000-memory.dmp

    Filesize

    4KB

  • memory/2808-11-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/2808-10-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2808-9-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/2808-8-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2808-30-0x0000000000360000-0x0000000000361000-memory.dmp

    Filesize

    4KB

  • memory/2808-4-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2808-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2808-7-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

  • memory/2808-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB

  • memory/2808-5-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2808-29-0x0000000000370000-0x0000000000371000-memory.dmp

    Filesize

    4KB

  • memory/2808-24-0x00000000002B0000-0x00000000002DC000-memory.dmp

    Filesize

    176KB

  • memory/2808-22-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/2808-21-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/2808-20-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/2808-19-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/2808-18-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/2808-17-0x00000000001C0000-0x00000000001C2000-memory.dmp

    Filesize

    8KB

  • memory/2808-16-0x00000000002E0000-0x00000000002E1000-memory.dmp

    Filesize

    4KB

  • memory/2808-15-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2808-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB

  • memory/2808-38-0x00000000007F0000-0x00000000007F1000-memory.dmp

    Filesize

    4KB