Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 22:46
Static task
static1
Behavioral task
behavioral1
Sample
2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe
-
Size
31KB
-
MD5
2e1997ee47a216548a0ed230312ea7ba
-
SHA1
267144a101246b8bfd81b3a42bae2cb88bd3fbf8
-
SHA256
1f73540ac22e8c6bbd0ee3bc4420f4eb5f54e608a245e0ebdd5146ff87ceb1d1
-
SHA512
0793de2f844b4d95595b856c1779a568b260b56b304e6ba6573941e6e195741c3ae37d8b6a686463e5093e801ef0d92314e977bb68f394be8fbde0d5d6d2c333
-
SSDEEP
384:qa9+ECGOuOQ9oSuXk0WJFiyozmgtJLMw2aVuymF6xjc6xrP84V1CVfTGQ7:iRba0WJs/CaZluP+VxQ4krR
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2304 2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe -
Drops file in Program Files directory 4 IoCs
description ioc Process File opened for modification C:\Program Files\Common Files\Microsoft Shared\MSINFO\xiaran.vxd 2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe File created C:\Program Files\Common Files\Microsoft Shared\MSINFO\xiaran.vxd 2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe File created C:\Program Files\Common Files\Microsoft Shared\MSINFO\xiaran.dll 2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\MSINFO\xiaran.dll 2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2304 2e1997ee47a216548a0ed230312ea7ba_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
17KB
MD54583f5186671bfa092140d1d49d062f3
SHA110ae22435eb3df51f390417a40c649a4f28a895b
SHA256d9ee4d9a619edb258fcaf2a265e1bf07303132d7a56e590de73e5be5ddf62744
SHA5129fabeb3ded1ed1de5b12c4c56bfefb6c1e6104c64352905696e6a7dfc9211c23e587f8b4ba6894b69984c0b303753c19da72c3d7573f3f70a7c3d328be5c0b5f