Overview
overview
7Static
static
728501b9a04...18.exe
windows7-x64
728501b9a04...18.exe
windows10-2004-x64
7$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDIR/OnTop.dll
windows7-x64
1$PLUGINSDIR/OnTop.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...sk.dll
windows7-x64
3$PLUGINSDI...sk.dll
windows10-2004-x64
3Desklets/C...ar.exe
windows7-x64
7Desklets/C...ar.exe
windows10-2004-x64
7Desklets/D...ch.exe
windows7-x64
7Desklets/D...ch.exe
windows10-2004-x64
7Desklets/W...er.exe
windows7-x64
7Desklets/W...er.exe
windows10-2004-x64
7jpdesk.exe
windows7-x64
7jpdesk.exe
windows10-2004-x64
7Analysis
-
max time kernel
141s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
06-07-2024 11:01
Behavioral task
behavioral1
Sample
28501b9a04976923e5fe9876b985b174_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28501b9a04976923e5fe9876b985b174_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/OnTop.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/OnTop.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsWebJPDesk.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsWebJPDesk.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
Desklets/Calendar/Calendar.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Desklets/Calendar/Calendar.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
Desklets/DeskSearch/DeskSearch.exe
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
Desklets/DeskSearch/DeskSearch.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
Desklets/Weather/Weather.exe
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
Desklets/Weather/Weather.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
jpdesk.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
jpdesk.exe
Resource
win10v2004-20240704-en
General
-
Target
jpdesk.exe
-
Size
851KB
-
MD5
390d0b24025393b6d19e788ecc14e374
-
SHA1
2b6705fd35d751a5e24d092903dbd6de53d13a42
-
SHA256
b3852f3b5fe203166b4e1cc8399788b28a6de122e1cdc2bca106865902e77422
-
SHA512
f531c53b2aa0fe368cad4fb2dbe44b8e07d7e4d0e0f186d2edc4c606547d33b4009f211565d16d46f65650cf6d5d82f3a8c8aad1c747dc0dd5b822dcbccfbd3e
-
SSDEEP
12288:csA0imoBqk2BnzlGkVFOdNAg7jWoGem4wbNok6rsxDK2TfptuUgjYD/Ug4JrkE6k:4qx5zpeEgPweaZJxuOgjYTUg4xkuJi41
Malware Config
Signatures
-
resource yara_rule behavioral19/memory/2064-0-0x0000000000400000-0x000000000067C000-memory.dmp upx behavioral19/memory/2064-2-0x0000000000400000-0x000000000067C000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).