Analysis
-
max time kernel
141s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
27-06-2024 05:07
Static task
static1
Behavioral task
behavioral1
Sample
14c7230a156f72ac55368c72a434729c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14c7230a156f72ac55368c72a434729c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14c7230a156f72ac55368c72a434729c_JaffaCakes118.exe
-
Size
1.0MB
-
MD5
14c7230a156f72ac55368c72a434729c
-
SHA1
dd60168356850fadf961bfd9d7f5bad855e0d9aa
-
SHA256
b970f3b6a1a388cc9cbbc0e6a7ac1cb563098211884f7d619b2b0b722701661f
-
SHA512
0ffa8d6886a4244412a0c8eaec404e71ea1299ca1d83f97ab43b379f32cd4a3be8e9619e3d8986cc0338c45aa3584b125f6f6277a5290105e834b07175f23b72
-
SSDEEP
24576:Yp+gqLL3n2aQavpw8JGUuWBob51v1Gvar8cE7E:YZg26v7JeX4
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\14c7230a156f72ac55368c72a434729c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\14c7230a156f72ac55368c72a434729c_JaffaCakes118.exe"1⤵PID:1152
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1420,i,17949988676391029604,13756926835471203788,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:81⤵PID:3460