Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 03:23
Static task
static1
Behavioral task
behavioral1
Sample
65d6f47bda1a780de696300890042918_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
65d6f47bda1a780de696300890042918_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
65d6f47bda1a780de696300890042918_JaffaCakes118.exe
-
Size
207KB
-
MD5
65d6f47bda1a780de696300890042918
-
SHA1
25c97db5e93a6122da014dc91ab1d76e1fbbedf5
-
SHA256
156b93c4fafb0c89fbff7ab57ef4d85f96c05d6dcc75814b1bc9b5f9918e284b
-
SHA512
6ab6a7427350140776e0d2f2a357edf83c6c64056339800839bf57eacdac18f19ba4dcbb26bb8ef20cd1842eeda45d16faad961072cd350d76420aa294339a99
-
SSDEEP
3072:UjuCuyHP3Yvs54WPZBerjpaSltK2Uv9LJqZzzD7d3evNBptME0prRP5RwAK:HLIo03gaS7JC9LJgzvd3evNBpsJ5RwX
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
Processes:
65d6f47bda1a780de696300890042918_JaffaCakes118.exedescription ioc process File created C:\Windows\Tasks\EFSSave.job 65d6f47bda1a780de696300890042918_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2420-2-0x0000000000B90000-0x0000000000C90000-memory.dmpFilesize
1024KB
-
memory/2420-1-0x00000000011C0000-0x00000000011D0000-memory.dmpFilesize
64KB
-
memory/2420-0-0x00000000003E0000-0x00000000003F0000-memory.dmpFilesize
64KB
-
memory/2420-4-0x0000000000740000-0x000000000076F000-memory.dmpFilesize
188KB