Analysis
-
max time kernel
120s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
20/06/2024, 06:27
Static task
static1
Behavioral task
behavioral1
Sample
03a1445c29ea2d16ae918f5b2d535d47_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03a1445c29ea2d16ae918f5b2d535d47_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
03a1445c29ea2d16ae918f5b2d535d47_JaffaCakes118.exe
-
Size
2.5MB
-
MD5
03a1445c29ea2d16ae918f5b2d535d47
-
SHA1
b089ee0e711341fc8f8c22dbc5a8973aa9040877
-
SHA256
3c49b10b7ffde6f00fa872753e58f0812f65635aafd619abae55d6eff36eb4dd
-
SHA512
a4336ad494584ba7fb7d956f4b4adca091d374caa0a3f14e9c34f9dfee213c3d84649050ec1b17eba29fd16bd406322fc569c5aa08e5f5679edd6ebf10cd9a69
-
SSDEEP
49152:QEZJxHqXcKIx8ggcgPpQdxr7zKycAMT6sluuuuuuuuuuuuuuuuuuuuuuuuuuuuuZ:QE7xHqs/Ojaxr7z/cApauuuuuuuuuuup
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 03a1445c29ea2d16ae918f5b2d535d47_JaffaCakes118.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz 03a1445c29ea2d16ae918f5b2d535d47_JaffaCakes118.exe