Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
06/07/2024, 18:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe
Resource
win7-20240705-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe
-
Size
511KB
-
MD5
291b0e7a9da6da22d5d770c917dc64c5
-
SHA1
3b57e34e0cba040303fef25fff7b1371bf22f193
-
SHA256
066eaff5da3377910532338134876da966e958c691dbe6680f4ef770e01ab273
-
SHA512
7bd29f4b2efb4c29bb28fc1d28dec189c03d1491b38de5ed3fc9c567ef9b1c5189d5b3973f3013f432547317cff9da88d0d8c7e199c0d55b3b579f1631724b3f
-
SSDEEP
6144:DangkZ0wXw7FzGmBYcE1czCm9oaMNfbPhVBi0rZ/3oJERC1yz7B//f0zyatWr3O6:UZPXwlGPxKopnN/3o1g71/Utuxj89Zo
Score
1/10
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\New Windows\Allow\*.poscoenc.com 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\New Windows\Allow\*.naver.com 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\New Windows\Allow\*.posco.co.kr 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\New Windows\Allow\*.posco.com 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\SOFTWARE\Microsoft\Internet Explorer\Main 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\New Windows\Allow\*.poscoway.net 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\DisableScriptDebuggerIE = "yes" 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\Enable Browser Extensions = "no" 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\New Windows\Allow\*.steel-n.com 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe = "0" 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\New Windows\Allow 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\Disable Script Debugger = "yes" 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\AllowWindowReuse = "0" 291b0e7a9da6da22d5d770c917dc64c5_JaffaCakes118.exe