Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
238ea953e975f808ddb58d885d241232_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
238ea953e975f808ddb58d885d241232_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
238ea953e975f808ddb58d885d241232_JaffaCakes118.exe
-
Size
118KB
-
MD5
238ea953e975f808ddb58d885d241232
-
SHA1
506d054f64d5965f8f01334f09158d5c8720bb46
-
SHA256
445296e2100048d008157ba7a13acd30f227c84412fb2be9902090d8b7f485cc
-
SHA512
3d42619eafaf236ab68e4167115ec14c3257e27c3558b6d59b190b90ef197be8e82fec34469aa0d8401640395bcfff32c68d73712a1f17d07a686e7e79efc669
-
SSDEEP
1536:0wN1GOwSw7SDqqPuILw1pfclzzPVMLayfYK2Q8lfaFXf5r3sPY+ohmrkNSOQWCkU:deN7SDqURw7sz+OVKfBR3sLkvQWe
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1768 238ea953e975f808ddb58d885d241232_JaffaCakes118.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\BASSMOD.dll 238ea953e975f808ddb58d885d241232_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1768 238ea953e975f808ddb58d885d241232_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD58d56adca34e7fb2dfacfc5ea87b23ff9
SHA10e93ae841d7a1f9587655906847ddcfc3269d9d1
SHA25601742d6f3acdbaa65d5bfaaa62f97414d0c9a295305a526d089b34a06b6099b7
SHA51296ceab8b750dae2a8e42bc353c1dfb5c43b879675e0f7e70d34467deebc2f9833269d38a6dadd621c76cadd465aa59fba0535c88a79a9ad8ea092caca04e78ab