Analysis
-
max time kernel
146s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20-06-2024 05:19
Static task
static1
Behavioral task
behavioral1
Sample
0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe
-
Size
327KB
-
MD5
0325809b9ec6d2f626f4b42af047d468
-
SHA1
9a3eac00a3c722953efbe56cef088a18abadc909
-
SHA256
9bda4871f4ce5da045adab860c1ed5d5934ecc8576e9c44ebd5edfc666b56148
-
SHA512
ce3e37c906baf4c3660422a1b35066402c826a0c47bf3f809ef0e095c4ae0f9581fdaf9bff040e798d7528f956b7dcd0e088912e76b4fd5ee0e323f21ea27703
-
SSDEEP
6144:/F2idZecnl20lHRxp3g3dygfPNc26JyG+KMvc8P3KaeR83GR:dF3Z4mxx3JftoP3Kak8G
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 1696 0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe 0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe 0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 1304 0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe 1304 0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe 1304 0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
PID:1304
-
C:\Windows\SysWOW64\0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exeC:\Windows\SysWOW64\0325809b9ec6d2f626f4b42af047d468_JaffaCakes118.exe1⤵
- Executes dropped EXE
PID:1696
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
327KB
MD50325809b9ec6d2f626f4b42af047d468
SHA19a3eac00a3c722953efbe56cef088a18abadc909
SHA2569bda4871f4ce5da045adab860c1ed5d5934ecc8576e9c44ebd5edfc666b56148
SHA512ce3e37c906baf4c3660422a1b35066402c826a0c47bf3f809ef0e095c4ae0f9581fdaf9bff040e798d7528f956b7dcd0e088912e76b4fd5ee0e323f21ea27703