Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
27-06-2024 06:20
Static task
static1
Behavioral task
behavioral1
Sample
14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe
-
Size
6.6MB
-
MD5
14f819c5550c9540f316a747cedd9ad4
-
SHA1
0fc97c64cb91f0383d7b78dd2dcd03b256ccc647
-
SHA256
f9f9ffac956d19ef231d5e85c24415bfaa1fb2312e4ebba1737ff9a43caf00fc
-
SHA512
3fb9707495c14db313bca19a89f0a7d02e6ceae6eea62fbae8c5bc8dc0ae96252efd7b652344690e4194488435bb7da2e184f93de779b26b8bef32ffff760a3a
-
SSDEEP
768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4V:tjrAX5NjJHJ+oFE2M/4V
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\Hacha Profesional Edition.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinZip 9.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\PSEmu.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\RealOne Player (Full version).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\BsPlayer v3.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Puta come mierda.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\GBAEmu.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\RM2GBA.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\a pelo.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual C.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Studio (full).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Basic 6.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Movie Maker.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Solo para Maricas.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Chenoa en cueros.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\WAV2MP3.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\GameCube Emulator.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\mugen (full).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Download.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Touch.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAmp skings and plugins.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\VMIntel386.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Silent Hill.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\No lo Descargues.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\humor.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\Sexo con una menor.exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe 14f819c5550c9540f316a747cedd9ad4_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.3MB
MD5bc09261cb24bab2a62823a5bc85d34ea
SHA19c332e5ba06e6cb7cd4e1feb6adfddb91b649cdd
SHA256b34e52ba172e6d1226905724c3efc9ac437568a643b2cb23a5a7ffe632b64557
SHA512b30bae581ab0f67f3912a2d957d52dc70608a50f9e22c2c7a7869a8966ee768aa09eb393c21845a1848c8a3d836c3647d5732cda1ed0f67f4d41caacc50c5cb2