Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 21:38
Static task
static1
Behavioral task
behavioral1
Sample
26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe
-
Size
452KB
-
MD5
26dbed3914f4f4e6ff111cbc7e126fa2
-
SHA1
061f64022d9defc52bcd20edcded1355a30cb940
-
SHA256
14f1b8726a0e107ccbfb002f746b0143eb60cfa596b646a8488fe9b6e4e9d7a4
-
SHA512
b5b0e5717b941af1b2b66c6d06f84bebd3f03f3c3534b788e00cb9f7ff1b51852eaf770b6ed917abb3ec0f45b81b664121260103a46320b093dd56046e6f2a25
-
SSDEEP
6144:tViWj89Ig7EG4unkeMDhY09Fnq9JZmqwY1llH4gDeT+R5MbS8Q2qyl8ZokcT12Qc:tE19vIekLDCEkJ8qw442eeaG1hQIpB
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.lnk 26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 2396 26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{56c530f6-3100-c5d9-56c5-530f6310c3d8}\26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe
Filesize452KB
MD526dbed3914f4f4e6ff111cbc7e126fa2
SHA1061f64022d9defc52bcd20edcded1355a30cb940
SHA25614f1b8726a0e107ccbfb002f746b0143eb60cfa596b646a8488fe9b6e4e9d7a4
SHA512b5b0e5717b941af1b2b66c6d06f84bebd3f03f3c3534b788e00cb9f7ff1b51852eaf770b6ed917abb3ec0f45b81b664121260103a46320b093dd56046e6f2a25