Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 23:03

General

  • Target

    a7039c40a35c7c23a0e73fd66f15eec0_JaffaCakes118.exe

  • Size

    285KB

  • MD5

    a7039c40a35c7c23a0e73fd66f15eec0

  • SHA1

    98f6c55fd33dd43188b79148e9c0a23b85f39e54

  • SHA256

    14e65a65941e0c76ef0e6286e8944d5f6936ebcd89c44754ddb8e6de61ac0dcd

  • SHA512

    86d898164380f5fe3688f7f9c708b1e8f59ba0722c4df69fd343fb16ec314baa0f9ff09f0122034d3c4916fd06f05ef9296531275f6013a4de5767ddaa0670c5

  • SSDEEP

    3072:P7t448j1hJvmDEat5VLoda83WFRAMg8Y27si6HYfuGCnWK6Nzg8KQyVJwb:PR4JHuQAVX8GXAMfUHfWKl3QyVJS

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a7039c40a35c7c23a0e73fd66f15eec0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a7039c40a35c7c23a0e73fd66f15eec0_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:1752

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1752-0-0x0000000000020000-0x0000000000040000-memory.dmp
    Filesize

    128KB

  • memory/1752-1-0x0000000000160000-0x000000000018F000-memory.dmp
    Filesize

    188KB

  • memory/1752-5-0x0000000000020000-0x0000000000040000-memory.dmp
    Filesize

    128KB

  • memory/1752-12-0x0000000000020000-0x0000000000040000-memory.dmp
    Filesize

    128KB