Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    02-06-2024 19:56

General

  • Target

    8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe

  • Size

    456KB

  • MD5

    8f3c609a15f8b1abd34441443bb9dea8

  • SHA1

    83dd404f6c89a54f43e0f738afe44dde88434f70

  • SHA256

    16a4e5a2c5cddfc5b03fc04390dc3a73bb23c94ba25741dc20a029095114ad0c

  • SHA512

    8780aa49e96170f3c0f2be7240fc780e51ab741fd699051f6f9b43c14d9de0a93571397d06b48407b4a3425d50f75e572886db85f9a360e337b2471c7ec76da3

  • SSDEEP

    12288:67dh1Hg0NeiCN5FZrh5pue2J8cYDGP+kPnZ:sVpeiCbrh5w9J80Z

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{ee36bea6-c19b-5c73-ee36-6bea6c19fa9b}\8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe

    Filesize

    456KB

    MD5

    8f3c609a15f8b1abd34441443bb9dea8

    SHA1

    83dd404f6c89a54f43e0f738afe44dde88434f70

    SHA256

    16a4e5a2c5cddfc5b03fc04390dc3a73bb23c94ba25741dc20a029095114ad0c

    SHA512

    8780aa49e96170f3c0f2be7240fc780e51ab741fd699051f6f9b43c14d9de0a93571397d06b48407b4a3425d50f75e572886db85f9a360e337b2471c7ec76da3

  • memory/2248-25-0x0000000002010000-0x0000000002011000-memory.dmp

    Filesize

    4KB

  • memory/2248-23-0x0000000001F60000-0x0000000001F61000-memory.dmp

    Filesize

    4KB

  • memory/2248-14-0x0000000001F30000-0x0000000001F31000-memory.dmp

    Filesize

    4KB

  • memory/2248-22-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

    Filesize

    4KB

  • memory/2248-7-0x0000000000780000-0x0000000000781000-memory.dmp

    Filesize

    4KB

  • memory/2248-16-0x0000000001FB0000-0x0000000001FDC000-memory.dmp

    Filesize

    176KB

  • memory/2248-29-0x0000000002430000-0x0000000002431000-memory.dmp

    Filesize

    4KB

  • memory/2248-28-0x0000000001FF0000-0x0000000001FF1000-memory.dmp

    Filesize

    4KB

  • memory/2248-27-0x0000000002030000-0x0000000002031000-memory.dmp

    Filesize

    4KB

  • memory/2248-26-0x0000000002020000-0x0000000002021000-memory.dmp

    Filesize

    4KB

  • memory/2248-31-0x0000000001F70000-0x0000000001F71000-memory.dmp

    Filesize

    4KB

  • memory/2248-30-0x0000000002040000-0x0000000002041000-memory.dmp

    Filesize

    4KB

  • memory/2248-24-0x0000000002000000-0x0000000002001000-memory.dmp

    Filesize

    4KB

  • memory/2248-0-0x00000000000A0000-0x00000000000A1000-memory.dmp

    Filesize

    4KB

  • memory/2248-39-0x0000000002110000-0x0000000002111000-memory.dmp

    Filesize

    4KB

  • memory/2248-2-0x0000000000100000-0x0000000000101000-memory.dmp

    Filesize

    4KB

  • memory/2248-13-0x00000000007F0000-0x00000000007F1000-memory.dmp

    Filesize

    4KB

  • memory/2248-12-0x00000000007E0000-0x00000000007E1000-memory.dmp

    Filesize

    4KB

  • memory/2248-11-0x00000000007D0000-0x00000000007D1000-memory.dmp

    Filesize

    4KB

  • memory/2248-10-0x00000000007C0000-0x00000000007C1000-memory.dmp

    Filesize

    4KB

  • memory/2248-9-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/2248-8-0x00000000007A0000-0x00000000007A1000-memory.dmp

    Filesize

    4KB

  • memory/2248-6-0x0000000000770000-0x0000000000771000-memory.dmp

    Filesize

    4KB

  • memory/2248-5-0x0000000000660000-0x0000000000661000-memory.dmp

    Filesize

    4KB

  • memory/2248-4-0x0000000000650000-0x0000000000651000-memory.dmp

    Filesize

    4KB

  • memory/2248-3-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2248-21-0x0000000000790000-0x0000000000792000-memory.dmp

    Filesize

    8KB

  • memory/2248-20-0x0000000001F50000-0x0000000001F51000-memory.dmp

    Filesize

    4KB

  • memory/2248-1-0x00000000000B0000-0x00000000000B2000-memory.dmp

    Filesize

    8KB

  • memory/2248-15-0x0000000001F40000-0x0000000001F41000-memory.dmp

    Filesize

    4KB