Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-05-2024 22:27
Static task
static1
Behavioral task
behavioral1
Sample
8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe
-
Size
458KB
-
MD5
8227695260e26e3f4452efb0fd83b9c7
-
SHA1
cc641e6a117a15d12d4806ea7d7319cb13afeaa5
-
SHA256
5dcc8f72fd6af89acaf714ed29d84e8026b6e52a9574abb3fadd182485f95aa5
-
SHA512
f372e9c8ebbf69e05f5d52418b30789a80d6970554763b583ab450a2cedcd5d3b6363faecf3a24467d9e28347b6ca5185cc8fd70aae8a36ce198df07a7434117
-
SSDEEP
12288:VWQr3MbQ5xDQ4la9cjfhxnlZvD5+sT3r97:VWQjb5JXpLl+297
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.lnk 8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 1736 8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{32f8eb1a-436d-1613-32f8-8eb1a436ac69}\8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe
Filesize458KB
MD58227695260e26e3f4452efb0fd83b9c7
SHA1cc641e6a117a15d12d4806ea7d7319cb13afeaa5
SHA2565dcc8f72fd6af89acaf714ed29d84e8026b6e52a9574abb3fadd182485f95aa5
SHA512f372e9c8ebbf69e05f5d52418b30789a80d6970554763b583ab450a2cedcd5d3b6363faecf3a24467d9e28347b6ca5185cc8fd70aae8a36ce198df07a7434117