Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 09:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe
Resource
win7-20240611-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe
Resource
win10v2004-20240508-en
3 signatures
150 seconds
General
-
Target
257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe
-
Size
92KB
-
MD5
257dd5e39344e4106ba187e2265c3e79
-
SHA1
887f2928e119036ec9513b035e6a050699b7e7f5
-
SHA256
21f8145342d003f46d32c3a7bd22e32ae815df5097fec715aeb9bdb4f973b273
-
SHA512
2ff43edb7f67727e47c197001262468551f50a0780ae0baa22f966ae274a35d1246abeb3d975db4e83c3140d2f44105ec32824e24cfc7e3b15508cc74a911ac6
-
SSDEEP
1536:SecSiHR/nWX9S3uFrmzbsJubK9HTI6s5+NWMJaQdyIlmwXx90dK92o3iMr+0Lpjh:Secvxv2zdssNWMJaQdyIlmwXx90dK92g
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Windows\CurrentVersion\Run\257dd5e39344e4106ba187e2265c3e79_JaffaCakes118 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe" 257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1688 257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1688 257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1688