Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 14:59

General

  • Target

    7258f964b7e882712db2a0246886369c_JaffaCakes118.exe

  • Size

    296KB

  • MD5

    7258f964b7e882712db2a0246886369c

  • SHA1

    daad56d5ed3e28984ca45f9adf74a79e19cc6044

  • SHA256

    1173a6b1e264d514f98de17d0373d22568365f681d5092f1b2fb58586217e85d

  • SHA512

    c5df2a20d1fd03dc36694dbec805cb6ca34f5bb1f9de64aa3a86d14e73cb9c5fb96a1000dc131a9b8594c4e96f8f96fea88a0e2de25954d7154f763e9382df19

  • SSDEEP

    6144:22flHx/XTBUzpa1a9YOn7J1H8umcdsmS/DBq:2IHd9E9YEVF8ZcdsmS/DBq

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7258f964b7e882712db2a0246886369c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\7258f964b7e882712db2a0246886369c_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3056-1-0x0000000000A10000-0x0000000000A50000-memory.dmp

    Filesize

    256KB

  • memory/3056-0-0x0000000000840000-0x0000000000880000-memory.dmp

    Filesize

    256KB

  • memory/3056-3-0x00000000007C0000-0x0000000000800000-memory.dmp

    Filesize

    256KB

  • memory/3056-4-0x0000000000080000-0x00000000000AF000-memory.dmp

    Filesize

    188KB