Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 08:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe
Resource
win7-20240708-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
3 signatures
150 seconds
General
-
Target
2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe
-
Size
880KB
-
MD5
2fabad22b4c7457d3915cfbb219c0b3d
-
SHA1
a3138e535cfbddcb97bbc6881fa05c12998ffdfa
-
SHA256
ad6a38ba46770ffa6c462a70b8c35c3c1a8890ae9a4f4ca22526d869e3ddd72e
-
SHA512
602745b50e722845ba9fec9dff657e3ae82bc81fb61c289cab648ed3aed4d3cc29f29b110a9f8207a822fa40277b41abb7e4083ea86684251bd3925f8a7cc3c7
-
SSDEEP
24576:gyFnw5OxwE+G/hROB4nQny46mKMk4RsHZs:1wW9DmKMUs
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\DrvSys = "DrvSys.exe" 2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created \??\c:\windows\2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe 2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe File opened for modification \??\c:\windows\2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe 2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3180 2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe 3180 2fabad22b4c7457d3915cfbb219c0b3d_JaffaCakes118.exe