Analysis
- max time kernel
133s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
30/05/2024, 02:02
Static task
static1
Behavioral task
behavioral1
Sample
82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe
Resource
win7-20240508-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
3 signatures
150 seconds
General
- Target 82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe
- Size 9.6MB
- Sample240530-cgc1vsbe74
- SHA256 95eb986fd43f7253ec5c965bd61a34d7d90ff29f1bbe0f53fff59935de62f458
- MD5 82b6a40029481bb36b197297ecb6eb5e
- SHA1 4a938ddc3c1db9006eb0489e00ac4e3850972fce
- SHA512 aeff0e0c69618c51b13f64d4b3de70d5e484c22f0a05c3f08546dfb9db9461fb43f1831da8ca655cab27cce8f2a2c4768e6a6706487c54342e591ba8829c3c60
- SSDEEP 196608:0WtLZpZ0iASo2wf64wgya1glN7iWhuUKgsP3k70Mnb1fzsIJx:rZh4w4wgyaC20Xsfk4Mnbp
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3100 82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe 3100 82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3100 82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe 3100 82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe 3100 82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe 3100 82b6a40029481bb36b197297ecb6eb5e_JaffaCakes118.exe