Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 21:38

General

  • Target

    26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe

  • Size

    452KB

  • MD5

    26dbed3914f4f4e6ff111cbc7e126fa2

  • SHA1

    061f64022d9defc52bcd20edcded1355a30cb940

  • SHA256

    14f1b8726a0e107ccbfb002f746b0143eb60cfa596b646a8488fe9b6e4e9d7a4

  • SHA512

    b5b0e5717b941af1b2b66c6d06f84bebd3f03f3c3534b788e00cb9f7ff1b51852eaf770b6ed917abb3ec0f45b81b664121260103a46320b093dd56046e6f2a25

  • SSDEEP

    6144:tViWj89Ig7EG4unkeMDhY09Fnq9JZmqwY1llH4gDeT+R5MbS8Q2qyl8ZokcT12Qc:tE19vIekLDCEkJ8qw442eeaG1hQIpB

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2396

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{56c530f6-3100-c5d9-56c5-530f6310c3d8}\26dbed3914f4f4e6ff111cbc7e126fa2_JaffaCakes118.exe

    Filesize

    452KB

    MD5

    26dbed3914f4f4e6ff111cbc7e126fa2

    SHA1

    061f64022d9defc52bcd20edcded1355a30cb940

    SHA256

    14f1b8726a0e107ccbfb002f746b0143eb60cfa596b646a8488fe9b6e4e9d7a4

    SHA512

    b5b0e5717b941af1b2b66c6d06f84bebd3f03f3c3534b788e00cb9f7ff1b51852eaf770b6ed917abb3ec0f45b81b664121260103a46320b093dd56046e6f2a25

  • memory/2396-19-0x0000000000680000-0x0000000000681000-memory.dmp

    Filesize

    4KB

  • memory/2396-9-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/2396-30-0x00000000007A0000-0x00000000007A1000-memory.dmp

    Filesize

    4KB

  • memory/2396-29-0x0000000000790000-0x0000000000791000-memory.dmp

    Filesize

    4KB

  • memory/2396-28-0x0000000000780000-0x0000000000781000-memory.dmp

    Filesize

    4KB

  • memory/2396-27-0x0000000000770000-0x0000000000771000-memory.dmp

    Filesize

    4KB

  • memory/2396-26-0x0000000000760000-0x0000000000761000-memory.dmp

    Filesize

    4KB

  • memory/2396-25-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/2396-24-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB

  • memory/2396-23-0x0000000000740000-0x0000000000741000-memory.dmp

    Filesize

    4KB

  • memory/2396-22-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/2396-21-0x0000000000710000-0x0000000000711000-memory.dmp

    Filesize

    4KB

  • memory/2396-20-0x00000000001A0000-0x00000000001A2000-memory.dmp

    Filesize

    8KB

  • memory/2396-0-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB

  • memory/2396-14-0x0000000000650000-0x0000000000676000-memory.dmp

    Filesize

    152KB

  • memory/2396-12-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/2396-18-0x0000000000600000-0x0000000000601000-memory.dmp

    Filesize

    4KB

  • memory/2396-11-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2396-10-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/2396-13-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/2396-8-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2396-7-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

  • memory/2396-6-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/2396-5-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2396-4-0x00000000000C0000-0x00000000000C1000-memory.dmp

    Filesize

    4KB

  • memory/2396-3-0x00000000000B0000-0x00000000000B1000-memory.dmp

    Filesize

    4KB

  • memory/2396-2-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB

  • memory/2396-31-0x00000000008B0000-0x00000000008B1000-memory.dmp

    Filesize

    4KB

  • memory/2396-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB