777730664beeade5b6f7b22e8dab7682caa8dfa1456b4c503be930f857265cea

Analysis

max time kernel
135s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
04-05-2024 08:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe
Size

161KB
MD5

11e12e0c4d93c8d9f2efc3787cc100c0
SHA1

12b61e351415a72f67afe5e7d6650c1443b47413
SHA256

777730664beeade5b6f7b22e8dab7682caa8dfa1456b4c503be930f857265cea
SHA512

7ecc0f2582171b5660b51fef1e2a54464450163a382d6818f68727e23668d5007ee7e19e0afcec0d6780a7864ed41ebb85dead3eeb5eaedd999d4dc8521525ce
SSDEEP

3072:fLk395hYXJkmCQMpywCP9EuToe4kNnuB6J0y0dxXiQbLUd/FVhfY2V7kl:fQq6mCQMpLCF1gSnuAJ0y0dxXXLUxFv+

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4620	11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:4620

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsw3D87.tmp\InstallOptions.dll

Filesize
14KB

MD5
325b008aec81e5aaa57096f05d4212b5

SHA1
27a2d89747a20305b6518438eff5b9f57f7df5c3

SHA256
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

SHA512
18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw3D87.tmp\ioSpecial.ini

Filesize
712B

MD5
9a203351178d59719e7bea170e0aefa6

SHA1
cb1ab978c1ef75610b7ea2562525d11966cf6564

SHA256
56e03b11c76f2b16f58de4f4bf4cc506501f72eb5e53f1e606408f81a6bf0589

SHA512
a6bb3c97dbf7bd10248f0133950390437f8ef3257899dcf1d8f0cc2110e053c661df7010602c7c96453777e6b332335f9791ff9ec7f0fd94eb543817a9af79c3

Download Submit