Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 01:09
Static task
static1
Behavioral task
behavioral1
Sample
693e7ef2d8bf08c58f5d597f69cca2f9_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
693e7ef2d8bf08c58f5d597f69cca2f9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
693e7ef2d8bf08c58f5d597f69cca2f9_JaffaCakes118.exe
-
Size
223KB
-
MD5
693e7ef2d8bf08c58f5d597f69cca2f9
-
SHA1
9ebbe0dc2f258a6c427b79d54cb9c5858c047e68
-
SHA256
13649723d679c3433fff696b9cf06065924cf9d88c46633172f6017c2867c5f7
-
SHA512
086b0a0e0b0c54062aa0abfb5491da45b6179a93c4033a4b79b3034b6ea01f9b0994be3f218d539e9080baec06a56514285ecbab205aee1454182b1d0c09e9ee
-
SSDEEP
3072:vfSi6w0bra9bvMjiPy+EuB8x1q0b3/sHNMNDd8gWzJD4+X8DdPf+PMILRvll9ozj:XSbPa5ci8tb3m2Dd8PDNsl0MIt9oz3T
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 1 IoCs
Processes:
693e7ef2d8bf08c58f5d597f69cca2f9_JaffaCakes118.exedescription ioc process File created C:\Windows\Tasks\CoolFX.job 693e7ef2d8bf08c58f5d597f69cca2f9_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2360-0-0x0000000000020000-0x0000000000021000-memory.dmpFilesize
4KB
-
memory/2360-1-0x0000000000030000-0x0000000000031000-memory.dmpFilesize
4KB
-
memory/2360-4-0x0000000000100000-0x0000000000101000-memory.dmpFilesize
4KB
-
memory/2360-3-0x00000000000F0000-0x00000000000F1000-memory.dmpFilesize
4KB
-
memory/2360-2-0x00000000001A0000-0x00000000001C0000-memory.dmpFilesize
128KB
-
memory/2360-5-0x00000000001D0000-0x00000000001FF000-memory.dmpFilesize
188KB
-
memory/2360-9-0x00000000001A0000-0x00000000001C0000-memory.dmpFilesize
128KB
-
memory/2360-17-0x00000000001A0000-0x00000000001C0000-memory.dmpFilesize
128KB