Analysis
-
max time kernel
129s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
04-06-2024 07:57
Static task
static1
Behavioral task
behavioral1
Sample
941396e1b9cc9b385e3de0c045386790_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
941396e1b9cc9b385e3de0c045386790_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
941396e1b9cc9b385e3de0c045386790_JaffaCakes118.exe
-
Size
2.3MB
-
MD5
941396e1b9cc9b385e3de0c045386790
-
SHA1
c342adf74c9f5253d8cf4cd89856a9f4119cf3d6
-
SHA256
d8de4498ee8a68f06f0399d3e2447b99adc740d9dbf23d36355281e090cd54ac
-
SHA512
7c44582b85d33361a27efe71f978a9af18c751991f7127c925cbc7b3549d82fbae9830432a6e00a007e3e24e841a56e2316b18b59195cfd418172aeaf7a8b108
-
SSDEEP
6144:g/KR9POuTlkwUkvgomj8ySX4oAIwCCGVmjTU2v+k:C2POuTewUkvvPwVGM/tvB
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\941396e1b9cc9b385e3de0c045386790_JaffaCakes118.lnk 941396e1b9cc9b385e3de0c045386790_JaffaCakes118.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\Bidaily Synchronize Task.job 941396e1b9cc9b385e3de0c045386790_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).