Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
08/07/2024, 17:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2d3723d1637c5051e99a4ade3011967b_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2d3723d1637c5051e99a4ade3011967b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
2 signatures
150 seconds
General
-
Target
2d3723d1637c5051e99a4ade3011967b_JaffaCakes118.exe
-
Size
19KB
-
MD5
2d3723d1637c5051e99a4ade3011967b
-
SHA1
26db2c7fa63a0c0ca2e08bc9e509c0c03732319a
-
SHA256
718049a5c7d547c24bb52125f2226bb2802b8630fc4c2ea518fc965a1204cf99
-
SHA512
9883e6671fa7eb35eaa237d89359e09fbb4ad0bb4fccaeef8f07a4ebf56844fd112bbc46536180350b23ba6e8a903063a5686fc221b553648bc960e25751c71f
-
SSDEEP
384:sJYYqEL2V61JBWQGeqnJMS/1J87x3G40Ek1pD:9YRSiJ9GZMKg7xCL
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\msapps\comsrvr.exe 2d3723d1637c5051e99a4ade3011967b_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2260 2d3723d1637c5051e99a4ade3011967b_JaffaCakes118.exe 2260 2d3723d1637c5051e99a4ade3011967b_JaffaCakes118.exe