Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    14-06-2024 01:49

General

  • Target

    a79e4fa1442842c68c7b65f076fd279f_JaffaCakes118.exe

  • Size

    284KB

  • MD5

    a79e4fa1442842c68c7b65f076fd279f

  • SHA1

    791924f5c7d0dd8d5acc92ef25f998f6fbcaa0cc

  • SHA256

    1445e806cf80bd37b3ae160c8ac0f58bb54d66785bde6dc334307c090a4db037

  • SHA512

    706d477140935b62eeb5ca101f5bf0c1dbef247a0b8625690b71ecb85f5731aa2064d8aa255549a2ad6f15f5d217a397ad0944ff80e0479be7640b1355dd12e4

  • SSDEEP

    3072:9801SjxsWbOyEusb52QjLTAT04CaH8R+cEWDMZZyXjktAIOBgT0EvffEo1HT:9xuCyEu820kbCacR+9WwZOjpKEo1z

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a79e4fa1442842c68c7b65f076fd279f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a79e4fa1442842c68c7b65f076fd279f_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2436

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2436-1-0x00000000010C0000-0x0000000001100000-memory.dmp

    Filesize

    256KB

  • memory/2436-2-0x00000000000F0000-0x000000000011F000-memory.dmp

    Filesize

    188KB