Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2024 16:26
Static task
static1
Behavioral task
behavioral1
Sample
63f4f224fda74a32c1f6ae5ff4fd7bec_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
63f4f224fda74a32c1f6ae5ff4fd7bec_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
63f4f224fda74a32c1f6ae5ff4fd7bec_JaffaCakes118.exe
-
Size
458KB
-
MD5
63f4f224fda74a32c1f6ae5ff4fd7bec
-
SHA1
c813999aaa178741fc46cd4d989bb265261e1902
-
SHA256
cde29db9e487146c010e3d366b339eae0b691d5cc1ec21e989eed061ef15e265
-
SHA512
707da5b795e6ae93a142864a74c09adc579a7f36c1355c86d1e865615fe97344a43b366ce3f7ccb72ff39619dc2719c4c40fe7125fa6f37c5fcf0d8995811ae4
-
SSDEEP
6144:VFOMgtfYHU4DHN38C499Qydb2hhHD+vU4EMz1rUlngs04eVhDVT2jzYhVpBFMHMM:jOfQFZI9REhHhnrnheyEvPWIb9A
Malware Config
Signatures
-
Drops startup file 1 IoCs
Processes:
63f4f224fda74a32c1f6ae5ff4fd7bec_JaffaCakes118.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\63f4f224fda74a32c1f6ae5ff4fd7bec_JaffaCakes118.lnk 63f4f224fda74a32c1f6ae5ff4fd7bec_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).