Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13-06-2024 09:23
Static task
static1
Behavioral task
behavioral1
Sample
a4d4c61ebcee98d1913665dcfb6a52ae_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a4d4c61ebcee98d1913665dcfb6a52ae_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a4d4c61ebcee98d1913665dcfb6a52ae_JaffaCakes118.exe
-
Size
293KB
-
MD5
a4d4c61ebcee98d1913665dcfb6a52ae
-
SHA1
2df6e66955024a3ca4072b76acad4f54050202d6
-
SHA256
10a6ccd07faf1a68e3626db66fb496519d5481c729253460a9a7ffd6642612ac
-
SHA512
7aed07f3032a3160c1b65a92884d94462f682626eed621b441fa6afb97b8e4c2d1780fbfd740e5659e14dfa457214e2b3c1950bc609b4b7e6df0aeb2b8338847
-
SSDEEP
6144:mrVJ+6Y0JQBkQRl7174NpNUM+UHs+ZIm//QFwhV1yAuz/IbsoNaQqj0C5xb:mrVk63yRl1uqM+gs+ZIm/IFwT2zuHY0y
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 4924 a4d4c61ebcee98d1913665dcfb6a52ae_JaffaCakes118.exe 4924 a4d4c61ebcee98d1913665dcfb6a52ae_JaffaCakes118.exe 4924 a4d4c61ebcee98d1913665dcfb6a52ae_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a4d4c61ebcee98d1913665dcfb6a52ae_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a4d4c61ebcee98d1913665dcfb6a52ae_JaffaCakes118.exe"1⤵
- Loads dropped DLL
PID:4924
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4404,i,1697479186275492802,18058102846092193784,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:81⤵PID:4824
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
269KB
MD5af7ce801c8471c5cd19b366333c153c4
SHA14267749d020a362edbd25434ad65f98b073581f1
SHA256cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e
SHA51288655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c
-
Filesize
60KB
MD50f44d43090e1e6784224ff618ce709ff
SHA11dd769d04e61e44ad3caf3aa28eb39b466477b34
SHA25693089adb588d7fd316e2d0ee6cb0b06bc92a314f5c90000f9515c87d635d2221
SHA5120eb3115652bc25bf981ad7edda4cb006fed41b080ea50b63011ccf0c13ebfe4a076af3dfc72caeb8f33f38e96ed92308c0ba367dc17db08ee46ea7c4b5c0207c
-
Filesize
153KB
MD5f16ac5e1a96d31a997a6e4c8f1adae0c
SHA1c8b035cc4cc66172538dfdd115d1804afef357c9
SHA256044a8ac9085c3f5524817d8dbd0ade4d43b9ab72978e15e61fdf8b00b68f69cc
SHA51235b2259c77e4e5c96657446b402cf1075dfd2e9c2d80029cc26ce796c8beb27a403917bbdef98760409ec0ea2afbbf853642638b0ea31e0166c1d29b6e4206e5