Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 10:50

General

  • Target

    9180f5324a8aa541c4189c5d4ac40b1a_JaffaCakes118.exe

  • Size

    322KB

  • MD5

    9180f5324a8aa541c4189c5d4ac40b1a

  • SHA1

    a9f5dac9e9e685057c6d43714e2316aa8fc0579d

  • SHA256

    2489b51990d9b9a028d377af822d52c6b9847a80c1083201bbdfa782175537a9

  • SHA512

    c11b6bc15ee1b754694d8c28729d985bb6ca0806d6cc0082ceee1e9608a6ccb951c47f2d7546ea23ea246a0b1e7324cef3f2b829b009783d55109e3135d29adf

  • SSDEEP

    6144:58IBVi3/666qCJP1vKZzLSjyCUa+6+9RX4arz3qs6XAIa:5rVA/iCujyl6+9KaPq9AIa

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9180f5324a8aa541c4189c5d4ac40b1a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9180f5324a8aa541c4189c5d4ac40b1a_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2056-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2056-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/2056-6-0x0000000000170000-0x0000000000195000-memory.dmp

    Filesize

    148KB

  • memory/2056-5-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/2056-4-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/2056-3-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

  • memory/2056-2-0x0000000000130000-0x0000000000131000-memory.dmp

    Filesize

    4KB

  • memory/2056-7-0x0000000000200000-0x000000000022F000-memory.dmp

    Filesize

    188KB

  • memory/2056-11-0x0000000000170000-0x0000000000195000-memory.dmp

    Filesize

    148KB

  • memory/2056-19-0x0000000000170000-0x0000000000195000-memory.dmp

    Filesize

    148KB