Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
09-07-2024 15:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
30eeb385aee9bea3fad2127fba3f4ccc_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
30eeb385aee9bea3fad2127fba3f4ccc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
30eeb385aee9bea3fad2127fba3f4ccc_JaffaCakes118.exe
-
Size
550KB
-
MD5
30eeb385aee9bea3fad2127fba3f4ccc
-
SHA1
07f80dd48b823f193af5f01d03175e0fbe4630a9
-
SHA256
236934ccb7723dbfe77878c044ad9e21a1f965779b9f504d145ce2e5b240fc11
-
SHA512
3ecf1634b9ba548024632283ae55c1c2f635ca93b1297df99d68f01b152200d4842cff3d5d55b621dd41df1ea42c0014a44a6118979c440ade49c3504787c160
-
SSDEEP
12288:3ezML0V7xYk+/2PWXrMVUmbzyFKuVDnvnvZL+YvVw1xFIkfN4+6:3wML0VV+/HMVyFFnvvZKDV7m
Score
1/10
Malware Config
Signatures
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\30eeb385aee9bea3fad2127fba3f4ccc_JaffaCakes118.exe 30eeb385aee9bea3fad2127fba3f4ccc_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\30eeb385aee9bea3fad2127fba3f4ccc_JaffaCakes118.exe\IsHostApp 30eeb385aee9bea3fad2127fba3f4ccc_JaffaCakes118.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2768 30eeb385aee9bea3fad2127fba3f4ccc_JaffaCakes118.exe