Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 03:23
Static task
static1
Behavioral task
behavioral1
Sample
65d6f47bda1a780de696300890042918_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
65d6f47bda1a780de696300890042918_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
65d6f47bda1a780de696300890042918_JaffaCakes118.exe
-
Size
207KB
-
MD5
65d6f47bda1a780de696300890042918
-
SHA1
25c97db5e93a6122da014dc91ab1d76e1fbbedf5
-
SHA256
156b93c4fafb0c89fbff7ab57ef4d85f96c05d6dcc75814b1bc9b5f9918e284b
-
SHA512
6ab6a7427350140776e0d2f2a357edf83c6c64056339800839bf57eacdac18f19ba4dcbb26bb8ef20cd1842eeda45d16faad961072cd350d76420aa294339a99
-
SSDEEP
3072:UjuCuyHP3Yvs54WPZBerjpaSltK2Uv9LJqZzzD7d3evNBptME0prRP5RwAK:HLIo03gaS7JC9LJgzvd3evNBpsJ5RwX
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 1 IoCs
Processes:
65d6f47bda1a780de696300890042918_JaffaCakes118.exedescription ioc process File created C:\Windows\Tasks\EFSSave.job 65d6f47bda1a780de696300890042918_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2824-0-0x0000000000B10000-0x0000000000B50000-memory.dmpFilesize
256KB
-
memory/2824-1-0x0000000000AC0000-0x0000000000B00000-memory.dmpFilesize
256KB
-
memory/2824-3-0x0000000000D10000-0x0000000000D50000-memory.dmpFilesize
256KB
-
memory/2824-4-0x00000000000F0000-0x000000000011F000-memory.dmpFilesize
188KB