Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13-06-2024 05:25
Static task
static1
Behavioral task
behavioral1
Sample
a3fa7427abb6ac0f5b3acc95f5cc7244_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3fa7427abb6ac0f5b3acc95f5cc7244_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a3fa7427abb6ac0f5b3acc95f5cc7244_JaffaCakes118.exe
-
Size
315KB
-
MD5
a3fa7427abb6ac0f5b3acc95f5cc7244
-
SHA1
10569acaa6be41a5c08cb9a2edbef2986c7d0419
-
SHA256
12074d283a731f2ac873629dfce02bea23cfe90e13514a9948bbe6d0e5c59bca
-
SHA512
0933f61923a2319b001812f5e4d40125c8050aa40cb8234ad55416d65d65f02c73cb26ee24f800a4e34c26657c5da38fd4a5b459787ef65de4410184ca8b18bd
-
SSDEEP
3072:Zri/Dv2YxggcnEkewV0Wsm/RwZxy/n/7t3HcIJe9w71Ye9YfkKBJPh0sZldubE3H:Zrib1Ovs4wLy/nfL1Ye9r0J6sZSbE3ig
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 1 IoCs
Processes:
a3fa7427abb6ac0f5b3acc95f5cc7244_JaffaCakes118.exedescription ioc process File created C:\Windows\Tasks\ScotchWatch.job a3fa7427abb6ac0f5b3acc95f5cc7244_JaffaCakes118.exe