Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 08:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe
Resource
win7-20240419-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe
-
Size
439KB
-
MD5
0d57bb938360adb4d7805e0af8f07519
-
SHA1
4d03b838a848eb98daaa3a49af217c2556266345
-
SHA256
1d1a03c019acf20cbd09aa1f45aef7c913f6b80a15bd2f4a7fcd43a64ece996f
-
SHA512
8a1a409b82e38614a146765eb90f1d10c3fa6f9a902da5ccad14eabbf8d13a5225a0591a73ff67efc11ed6a1ceab40bc60efcc4e40f0b9ad1de58f2102170c91
-
SSDEEP
12288:BrgeN+g2sCpu+PKmXjjZthx+lDnJCgXT2OBGuNOw3V:RgUL2sQdPNXjjZtHCDEfuYw
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2284-1-0x0000000000400000-0x000000000047B000-memory.dmp upx behavioral1/memory/2284-2-0x0000000000400000-0x0000000000485000-memory.dmp upx behavioral1/memory/2284-4-0x0000000000400000-0x000000000047B000-memory.dmp upx -
Modifies Control Panel 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Control Panel\5761b2dc-ce77-4bfa-b965-6f33b1867cf2 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe 2284 0d57bb938360adb4d7805e0af8f07519_JaffaCakes118.exe