Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-05-2024 22:27

General

  • Target

    8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe

  • Size

    458KB

  • MD5

    8227695260e26e3f4452efb0fd83b9c7

  • SHA1

    cc641e6a117a15d12d4806ea7d7319cb13afeaa5

  • SHA256

    5dcc8f72fd6af89acaf714ed29d84e8026b6e52a9574abb3fadd182485f95aa5

  • SHA512

    f372e9c8ebbf69e05f5d52418b30789a80d6970554763b583ab450a2cedcd5d3b6363faecf3a24467d9e28347b6ca5185cc8fd70aae8a36ce198df07a7434117

  • SSDEEP

    12288:VWQr3MbQ5xDQ4la9cjfhxnlZvD5+sT3r97:VWQjb5JXpLl+297

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:1736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{32f8eb1a-436d-1613-32f8-8eb1a436ac69}\8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe

    Filesize

    458KB

    MD5

    8227695260e26e3f4452efb0fd83b9c7

    SHA1

    cc641e6a117a15d12d4806ea7d7319cb13afeaa5

    SHA256

    5dcc8f72fd6af89acaf714ed29d84e8026b6e52a9574abb3fadd182485f95aa5

    SHA512

    f372e9c8ebbf69e05f5d52418b30789a80d6970554763b583ab450a2cedcd5d3b6363faecf3a24467d9e28347b6ca5185cc8fd70aae8a36ce198df07a7434117

  • memory/1736-31-0x0000000000390000-0x0000000000391000-memory.dmp

    Filesize

    4KB

  • memory/1736-3-0x00000000000B0000-0x00000000000B1000-memory.dmp

    Filesize

    4KB

  • memory/1736-29-0x0000000000370000-0x0000000000371000-memory.dmp

    Filesize

    4KB

  • memory/1736-13-0x0000000000210000-0x0000000000211000-memory.dmp

    Filesize

    4KB

  • memory/1736-12-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/1736-11-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/1736-10-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/1736-9-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/1736-8-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1736-18-0x00000000002C0000-0x00000000002EC000-memory.dmp

    Filesize

    176KB

  • memory/1736-14-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/1736-24-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/1736-17-0x00000000001B0000-0x00000000001B2000-memory.dmp

    Filesize

    8KB

  • memory/1736-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/1736-39-0x00000000022B0000-0x00000000022B1000-memory.dmp

    Filesize

    4KB

  • memory/1736-2-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/1736-28-0x0000000000360000-0x0000000000361000-memory.dmp

    Filesize

    4KB

  • memory/1736-27-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/1736-26-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/1736-25-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/1736-16-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/1736-15-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/1736-23-0x0000000000320000-0x0000000000321000-memory.dmp

    Filesize

    4KB

  • memory/1736-22-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/1736-7-0x00000000001A0000-0x00000000001A1000-memory.dmp

    Filesize

    4KB

  • memory/1736-6-0x0000000000190000-0x0000000000191000-memory.dmp

    Filesize

    4KB

  • memory/1736-5-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/1736-4-0x00000000000C0000-0x00000000000C1000-memory.dmp

    Filesize

    4KB

  • memory/1736-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB

  • memory/1736-30-0x0000000000380000-0x0000000000381000-memory.dmp

    Filesize

    4KB