Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13/06/2024, 05:07
Static task
static1
Behavioral task
behavioral1
Sample
a3eb570bf2c6d2f9092c5f7b5b004412_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a3eb570bf2c6d2f9092c5f7b5b004412_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a3eb570bf2c6d2f9092c5f7b5b004412_JaffaCakes118.exe
-
Size
370KB
-
MD5
a3eb570bf2c6d2f9092c5f7b5b004412
-
SHA1
28c6f05bf0bd5c7ac775db25f6b480f9e18a6196
-
SHA256
381d72322fd595e2ceb67f2d1d9c229352982db295ea84d5c1fc7d27e5d635a4
-
SHA512
39ffebdfae05b9a57f5a431b4c6c038e21e4ae273197b1c741d06e529a3595ea95b26126763e78b6c6cd2bf67d5203a3e3ba483e96d189bc82a6e3b6f687c68e
-
SSDEEP
6144:mn0NqPhfHrP6Id3DEBqN5k/VHfmTx9Ig/x7qynS8fUw62rXiYydbpvudRRZrBaJ8:miqPJ76Id5cix9Ig5ZEPtL/u
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a3eb570bf2c6d2f9092c5f7b5b004412_JaffaCakes118.lnk a3eb570bf2c6d2f9092c5f7b5b004412_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 2188 a3eb570bf2c6d2f9092c5f7b5b004412_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{b65ef68c-094a-405e-b65e-ef68c094da30}\a3eb570bf2c6d2f9092c5f7b5b004412_JaffaCakes118.exe
Filesize370KB
MD5a3eb570bf2c6d2f9092c5f7b5b004412
SHA128c6f05bf0bd5c7ac775db25f6b480f9e18a6196
SHA256381d72322fd595e2ceb67f2d1d9c229352982db295ea84d5c1fc7d27e5d635a4
SHA51239ffebdfae05b9a57f5a431b4c6c038e21e4ae273197b1c741d06e529a3595ea95b26126763e78b6c6cd2bf67d5203a3e3ba483e96d189bc82a6e3b6f687c68e