Analysis
-
max time kernel
136s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 02:04
Static task
static1
Behavioral task
behavioral1
Sample
6963119871efa7f893d7422eb8c9e525_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6963119871efa7f893d7422eb8c9e525_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6963119871efa7f893d7422eb8c9e525_JaffaCakes118.exe
-
Size
369KB
-
MD5
6963119871efa7f893d7422eb8c9e525
-
SHA1
0e164fcc36e4111dea155bc2add93c9d8fd14d15
-
SHA256
4eaceccfda476bec836761e6f0454d1fd1365b7f439ade7c91e10892da2c9350
-
SHA512
6d3775563bec02ef7f582d0f5a9ae14154e91e074b71e6be4cc12dc543cddc1f6fe3bfea76bb8690e19e6bd925a4754fb20666bc8a4b19851c8d21e7fe29f9b5
-
SSDEEP
6144:tO7EmU0q7KPNFDxQBd3GU/cz0JgK5RboXjpFhPSrDtF5oGSrHVl++a+a1x79+fVF:47E4q+lFWQ1ggK5dolPgY72aB
Malware Config
Signatures
-
Drops startup file 1 IoCs
Processes:
6963119871efa7f893d7422eb8c9e525_JaffaCakes118.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6963119871efa7f893d7422eb8c9e525_JaffaCakes118.lnk 6963119871efa7f893d7422eb8c9e525_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).