Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/06/2024, 09:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe
Resource
win7-20240611-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
-
Target
15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe
-
Size
45KB
-
MD5
15925a4c635b1348257b90be1db4ddbe
-
SHA1
47d1c7465be177b26345a3a8570a8140f99f87f1
-
SHA256
4ec815549d82fa5b5f6967f8b276faf63fe2c49874218a8344d7582d14600046
-
SHA512
dcc5e9497bed3998f5b881c5ec06960008c92df1e1d6af4d58296300e2c7fedc78143920708f514deda66ac843be2776401b2d5c13f07c00402c7d0b307ca466
-
SSDEEP
768:6iQxqcQ9emJhq8yKSUquI80GQsWegUGpD+66NO2Kteh+Gfh79ZRP:dQxqcQkmJhWUquI80GQpUGt+6b3ehpF1
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\Msinfozx.dll 15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe -
Modifies registry class 5 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{083CEB8F-872C-4415-9400-64FA3E64626E}\InProcServer32\ = "C:\\Windows\\SysWow64\\Msinfozx.dll" 15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{083CEB8F-872C-4415-9400-64FA3E64626E}\InProcServer32\ThreadingModel = "Apartment" 15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{083CEB8F-872C-4415-9400-64FA3E64626E} 15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{083CEB8F-872C-4415-9400-64FA3E64626E}\ = "CTT0HOOK" 15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{083CEB8F-872C-4415-9400-64FA3E64626E}\InProcServer32 15925a4c635b1348257b90be1db4ddbe_JaffaCakes118.exe