Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04-05-2024 02:16
Static task
static1
Behavioral task
behavioral1
Sample
113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe
-
Size
370KB
-
MD5
113723679d50b8976a967ae4db6ebdc7
-
SHA1
4fd45b6e07c6a276b6d84a1261a8711fd92d998b
-
SHA256
67a996d9f2b7c1ad3f1bea3788c15f01a6dec4bf0d9aefaca399b9ab1f66f2af
-
SHA512
313057f8ae5a81fb3d5d75954830568d76c237999cd7097cf6fed8a2e228c6543e775f980ca93c2f113b43571ea8597e6853b460f4aaa64481e6c2f3ec42dc97
-
SSDEEP
6144:uNb2O6bZ6McUBJrcLVNUoVazkiwYZgBS7MXzpmzeJ2h+0mGJk0ctq3ldqsEtT:u5v6F6Mc/ZAGS7G+xEtT
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.lnk 113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 2808 113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{3bf665ce-d8e7-b402-3bf6-665ced8e973b}\113723679d50b8976a967ae4db6ebdc7_JaffaCakes118.exe
Filesize370KB
MD5113723679d50b8976a967ae4db6ebdc7
SHA14fd45b6e07c6a276b6d84a1261a8711fd92d998b
SHA25667a996d9f2b7c1ad3f1bea3788c15f01a6dec4bf0d9aefaca399b9ab1f66f2af
SHA512313057f8ae5a81fb3d5d75954830568d76c237999cd7097cf6fed8a2e228c6543e775f980ca93c2f113b43571ea8597e6853b460f4aaa64481e6c2f3ec42dc97