General
-
Target
737fe3035cd9c9a6ce5f47f3b6394ca7_JaffaCakes118
-
Size
4.0MB
-
Sample
240525-2pwwdadh76
-
MD5
737fe3035cd9c9a6ce5f47f3b6394ca7
-
SHA1
142f4dea2a9c9bc85c042b26ad536ed26bfaad5b
-
SHA256
35836343211f823d151d51cc350e7537bb8407c4b8dc4cdef41dbecea4e301b6
-
SHA512
b28d8ac89723b8e707b8058f5c5ff6a17d04ee49ba09bdc76847c276964cdbcd172633522cd77eee7086ac85ff1952ce71acab41ad62ef2311ff1175ac03e27f
-
SSDEEP
49152:b/erQZbd2w8YerQZbd2w8YerQZbd2w8YerQZbd2w8YerQZbd2w8V1:irQZmrQZmrQZmrQZmrQZq
Static task
static1
Behavioral task
behavioral1
Sample
737fe3035cd9c9a6ce5f47f3b6394ca7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
737fe3035cd9c9a6ce5f47f3b6394ca7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
737fe3035cd9c9a6ce5f47f3b6394ca7_JaffaCakes118
-
Size
4.0MB
-
MD5
737fe3035cd9c9a6ce5f47f3b6394ca7
-
SHA1
142f4dea2a9c9bc85c042b26ad536ed26bfaad5b
-
SHA256
35836343211f823d151d51cc350e7537bb8407c4b8dc4cdef41dbecea4e301b6
-
SHA512
b28d8ac89723b8e707b8058f5c5ff6a17d04ee49ba09bdc76847c276964cdbcd172633522cd77eee7086ac85ff1952ce71acab41ad62ef2311ff1175ac03e27f
-
SSDEEP
49152:b/erQZbd2w8YerQZbd2w8YerQZbd2w8YerQZbd2w8YerQZbd2w8V1:irQZmrQZmrQZmrQZmrQZq
Score10/10-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Sets file execution options in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1