Analysis
-
max time kernel
140s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/06/2024, 04:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
14c0f9638c8fb2f17a3682d6ca26bb98_JaffaCakes118.exe
Resource
win7-20240419-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
14c0f9638c8fb2f17a3682d6ca26bb98_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
14c0f9638c8fb2f17a3682d6ca26bb98_JaffaCakes118.exe
-
Size
382KB
-
MD5
14c0f9638c8fb2f17a3682d6ca26bb98
-
SHA1
73a51f160a6842822348ac768f83dab068115c52
-
SHA256
1793bd90a2ed07bb7fae8226d09fbed8abb9a861bc767969ee9205a2fdb5b651
-
SHA512
94e029b101408ad24cf6d10d7297e89b8c7b858713d98f5040344128ef5e41820b7f56854748b0eac65b1363d1f65f63684702980a4c0589f4e07607370fca3b
-
SSDEEP
6144:H5kn9rxV0EmRDnZ4dCHr/K8ymDbnnxEoBJJ1DiimrkbwyEal:y9NV0EmRDZoMvXnnyWDewH/
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunServices\SVCHOST.EXE = "C:\\Users\\Admin\\AppData\\Local\\Temp\\14c0f9638c8fb2f17a3682d6ca26bb98_JaffaCakes118.exe" 14c0f9638c8fb2f17a3682d6ca26bb98_JaffaCakes118.exe