Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
07-05-2024 23:38
Static task
static1
Behavioral task
behavioral1
Sample
223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
223aee4d722c65c5e0891b6c966e469c
-
SHA1
80097e7427d344c41180dd5ec6a9f66c87a199ce
-
SHA256
74704c98b76728f61dd667d3133df6b8bc78eb9bd781b35204d48eb16c464f37
-
SHA512
2c1e99d48c0fecd61dd4132087d48afe2ab386f7d830b3993e73605492b5117f295ba64a19ef0c3322591e050e6f8fad1e37d4f6ffb4671470f8c410181c427f
-
SSDEEP
24576:UhbSC2hgr7f/vzXurpcWjNpjlAZALeCZay8aA3F3/0NymLDWb2I8tyJ7KYYk0bQ:UhbSCR7f/vqdc4pj0AqCoaAtcNymLDab
Malware Config
Signatures
-
Loads dropped DLL 6 IoCs
pid Process 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 43 IoCs
pid Process 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe 2912 223aee4d722c65c5e0891b6c966e469c_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
224KB
MD55de3e6de5001ba45853c1824babe0774
SHA1ce238d98ad066e53810e5872168bc84fc4f325cf
SHA2565aa45b6024eae73a509041d0e532afef7a4a7fb5fb7e5efce29ff04313a6977e
SHA5123b9945f6671c47cad49ab7e43ee24e430e3ce1b4d761604246c69aea9f4b8449a3133e8a7c8cf9f851e99525e7deedac414381a86f4d95faa80a471b7cb209db
-
Filesize
220KB
MD5acc23e47ab8fd9a885325feaaedda802
SHA138811940ae3f561122a04a26f8cb8c7e5658ef2b
SHA2563affd8f8d8d943fc8f90b90fbea62c719d6a3ba46542cca0529295104e4b4a3f
SHA512e5b87afa7f1d1344ca66710a2c413876eda763e3b524949288599071049a96baff2758d6bb53d223eb39c57a76d3f14b59fcbfefb886fcad3aea51c0e22a181a
-
Filesize
480KB
MD5338c9901d7a5cfeafd5b5a0c502fe96a
SHA10caf8271b2ebe5d3bd6fd66223e3a7a1e7d3dbd4
SHA2566cf3add9e8297e2c6e0dd3ecdf7f8500c123c7779e5807a3c58de62aeb19156f
SHA51245feb22b3fb505cb37ea0eff3494604f04a874ac6e8e2e9b2f2bf4d801f8d79a613967d23a4d69ffe0609d1cdba2c1292e5c8a3ec98df779db51b9be77a02a96
-
Filesize
380KB
MD5b83e974b0c7c055ca74730282d9ac6fc
SHA1a0234b4bce9ec697b92f4ec3d160d4b4360a776e
SHA256c69a25997dd5b52556d6a72e8eb76b8d2f3e8bebfe5e64962b92849570e4bbe1
SHA512022dd2f74fd34cb392a6a98848706f37403584e0a1adf9b8ed107675613f529208896c0228da6d318bee35936853f452b3fa87ff71274c12a0fecc2b675e7995
-
Filesize
1.0MB
MD54b30dbe1a79b2b7572ff637cb3765ced
SHA1b08eba0e9bdb62d426db8d2b3d451152a56f79a1
SHA2564208bdf90e97398a452d459d89562bda361bc6e911a385c4e31481a776f69e6d
SHA51240e99c4a9d160a734a1675d75209dd88c7389c95cf0d0b6101f7e9edb2f3ebfe85e7170f0f4bae8a2e9533048bd5ecd414797b02ef257aecd90431f0c29ccfce
-
Filesize
168KB
MD5cb719d86ad4ec43d95e30da1de22b74f
SHA16a5584f5d462413bef1fb12143f7ce14966f5092
SHA256f08e9eb5780064f9bb6aef70269ff057b2deae02f05b384c87da09de4f6cc070
SHA512d7ddb1c32794f0024dc8e34a54f5d4230d41dfbc9488d4249f3d94ce2e08848c5d485c7abc1d60ddf35e860406b138f5758c4cf24436d82dd77e16dbd8114ef0