Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24-06-2024 23:07
Static task
static1
Behavioral task
behavioral1
Sample
0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe
-
Size
2.6MB
-
MD5
0b27e6a372a731ef13a5cb5c4e7f2fa7
-
SHA1
afcc3b30ccfb3606f34e7009aeaf4b23ad642fc1
-
SHA256
2d63ff501cd23602149ffb2a4a5791bb6da4e635b75976b8cd2fddd692f8d7ab
-
SHA512
6aa96c1476c90a5cd2aec4c579490f6bfdb0a31df801489790a88f5d93af30a64f8d9f21840f4b9cd2e9993dd5aa60c250214f1d9852e5ab65fcc82aeb380c23
-
SSDEEP
768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4f:tjrAX5NjJHJ+oFE2M/4f
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\RealOne Player (Full version).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\RM2GBA.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Chenoa en cueros.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Movie Maker.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\No lo Descargues.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\GBAEmu.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Puta come mierda.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Download.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual C.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Studio (full).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\mugen (full).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Touch.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\VMIntel386.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Basic 6.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Solo para Maricas.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\PSEmu.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\humor.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\a pelo.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\WinZip 9.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Hacha Profesional Edition.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\GameCube Emulator.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Sexo con una menor.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAmp skings and plugins.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\BsPlayer v3.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Silent Hill.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\WAV2MP3.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe 0b27e6a372a731ef13a5cb5c4e7f2fa7_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.3MB
MD59314a428cb9090391dc614585e9192e5
SHA149b05c506ded23cf17ecc86ce02501f574092f48
SHA256b5fde0e71044a4a4f5b94058bbcb1a755322af46837b2c139dbbc88e1d6ff29e
SHA512fbeb9460fde61bf01aabc208dc714e6ce47f14a701340f1c0311a802e777811f2ac1e7a49ccee6685be4c0d4ccc52d1437ef55f10708ddecf37c37dec43abe8e