Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:08
Static task
static1
Behavioral task
behavioral1
Sample
693d8c39ebf280ce05d151b7f7de1807_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
693d8c39ebf280ce05d151b7f7de1807_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
693d8c39ebf280ce05d151b7f7de1807_JaffaCakes118.exe
-
Size
458KB
-
MD5
693d8c39ebf280ce05d151b7f7de1807
-
SHA1
db19a62a47730b0bd43c1b995012934cad693f93
-
SHA256
47aaf53559852f02a3a8904d88492f6c9938fab5f12db0d8bfe1441acca5eabd
-
SHA512
e3f6f9d84200f8df907aea5067b1503dedaff1267e52002bdbcbf3e67cd90a0bc6349134cdfa9142ddd62728457c5def4765428ddfe79d8ecf4db7d8676a66bb
-
SSDEEP
6144:oW2/QDpDZvE/qglk5cd3jr6q8MQMBgo1QdGmAiffNdZ1UgQdIWDtxwxqQmXjtpjA:12SpNmqglucdHmLMa0QkmAYA6
Malware Config
Signatures
-
Drops startup file 1 IoCs
Processes:
693d8c39ebf280ce05d151b7f7de1807_JaffaCakes118.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\693d8c39ebf280ce05d151b7f7de1807_JaffaCakes118.lnk 693d8c39ebf280ce05d151b7f7de1807_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/116-0-0x0000000000110000-0x0000000000111000-memory.dmpFilesize
4KB
-
memory/116-2-0x0000000000130000-0x0000000000131000-memory.dmpFilesize
4KB
-
memory/116-1-0x0000000000120000-0x0000000000122000-memory.dmpFilesize
8KB
-
memory/116-10-0x00000000012C0000-0x00000000012C1000-memory.dmpFilesize
4KB
-
memory/116-17-0x0000000001360000-0x0000000001361000-memory.dmpFilesize
4KB
-
memory/116-16-0x0000000001310000-0x0000000001311000-memory.dmpFilesize
4KB
-
memory/116-15-0x0000000000900000-0x0000000000902000-memory.dmpFilesize
8KB
-
memory/116-26-0x0000000001330000-0x000000000135C000-memory.dmpFilesize
176KB
-
memory/116-25-0x00000000013E0000-0x00000000013E1000-memory.dmpFilesize
4KB
-
memory/116-24-0x00000000013D0000-0x00000000013D1000-memory.dmpFilesize
4KB
-
memory/116-23-0x00000000013C0000-0x00000000013C1000-memory.dmpFilesize
4KB
-
memory/116-22-0x00000000013B0000-0x00000000013B1000-memory.dmpFilesize
4KB
-
memory/116-21-0x00000000013A0000-0x00000000013A1000-memory.dmpFilesize
4KB
-
memory/116-33-0x00000000032D0000-0x00000000032D1000-memory.dmpFilesize
4KB
-
memory/116-32-0x0000000001380000-0x0000000001381000-memory.dmpFilesize
4KB
-
memory/116-20-0x0000000001390000-0x0000000001391000-memory.dmpFilesize
4KB
-
memory/116-19-0x0000000001320000-0x0000000001321000-memory.dmpFilesize
4KB
-
memory/116-18-0x0000000001370000-0x0000000001371000-memory.dmpFilesize
4KB
-
memory/116-14-0x0000000001300000-0x0000000001301000-memory.dmpFilesize
4KB
-
memory/116-13-0x00000000012F0000-0x00000000012F1000-memory.dmpFilesize
4KB
-
memory/116-11-0x00000000012D0000-0x00000000012D1000-memory.dmpFilesize
4KB
-
memory/116-12-0x00000000012E0000-0x00000000012E1000-memory.dmpFilesize
4KB
-
memory/116-9-0x00000000012B0000-0x00000000012B1000-memory.dmpFilesize
4KB
-
memory/116-8-0x0000000000910000-0x0000000000911000-memory.dmpFilesize
4KB
-
memory/116-7-0x00000000008B0000-0x00000000008B1000-memory.dmpFilesize
4KB
-
memory/116-6-0x00000000008A0000-0x00000000008A1000-memory.dmpFilesize
4KB
-
memory/116-5-0x0000000000890000-0x0000000000891000-memory.dmpFilesize
4KB
-
memory/116-4-0x0000000000420000-0x0000000000421000-memory.dmpFilesize
4KB
-
memory/116-3-0x0000000000400000-0x0000000000401000-memory.dmpFilesize
4KB
-
memory/116-46-0x0000000002E60000-0x0000000002E61000-memory.dmpFilesize
4KB