Analysis
- max time kernel
122s - max time network
123s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
- submitted
03/06/2024, 12:50
General
- Target 91d89a8c68d34611dd375668aa4c28c0_JaffaCakes118.exe
- Size 473KB
- Sample240603-p273ysfa4x
- SHA256 f0f41a44cf6706c20888f581424ff1aa6dd88bcce396ebd51fac942648552b0b
Malware Config
Signatures
- Drops startup file 1 IoCs
- Loads dropped DLL 1 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\91d89a8c68d34611dd375668aa4c28c0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\91d89a8c68d34611dd375668aa4c28c0_JaffaCakes118.exe"1⤵
- Drops startup file
- Loads dropped DLL
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
91d89a8c68d34611dd375668aa4c28c0_JaffaCakes118.exe
memory/2420-13-0x0000000000600000-0x0000000000601000-memory.dmp
memory/2420-7-0x00000000001B0000-0x00000000001B1000-memory.dmp
memory/2420-28-0x0000000000710000-0x0000000000711000-memory.dmp
memory/2420-27-0x0000000000700000-0x0000000000701000-memory.dmp
memory/2420-26-0x00000000006B0000-0x00000000006B1000-memory.dmp
memory/2420-25-0x00000000006A0000-0x00000000006A1000-memory.dmp
memory/2420-24-0x0000000000680000-0x0000000000681000-memory.dmp
memory/2420-23-0x0000000000690000-0x0000000000691000-memory.dmp
memory/2420-22-0x0000000000670000-0x0000000000671000-memory.dmp
memory/2420-17-0x00000000001A0000-0x00000000001A2000-memory.dmp
memory/2420-16-0x0000000000660000-0x0000000000661000-memory.dmp
memory/2420-15-0x0000000000650000-0x0000000000651000-memory.dmp
memory/2420-14-0x0000000000610000-0x0000000000611000-memory.dmp
memory/2420-0-0x0000000000020000-0x0000000000022000-memory.dmp
memory/2420-18-0x0000000000620000-0x0000000000646000-memory.dmp
memory/2420-10-0x00000000001F0000-0x00000000001F1000-memory.dmp
memory/2420-12-0x00000000005F0000-0x00000000005F1000-memory.dmp
memory/2420-9-0x00000000001E0000-0x00000000001E1000-memory.dmp
memory/2420-8-0x00000000001C0000-0x00000000001C1000-memory.dmp
memory/2420-11-0x0000000000200000-0x0000000000201000-memory.dmp
memory/2420-6-0x0000000000190000-0x0000000000191000-memory.dmp
memory/2420-5-0x0000000000180000-0x0000000000181000-memory.dmp
memory/2420-4-0x0000000000170000-0x0000000000171000-memory.dmp
memory/2420-3-0x0000000000120000-0x0000000000121000-memory.dmp
memory/2420-2-0x0000000000110000-0x0000000000111000-memory.dmp
memory/2420-33-0x0000000000730000-0x0000000000731000-memory.dmp
memory/2420-32-0x0000000000720000-0x0000000000721000-memory.dmp
memory/2420-34-0x0000000000740000-0x0000000000741000-memory.dmp
memory/2420-1-0x0000000000030000-0x0000000000031000-memory.dmp