Analysis
-
max time kernel
142s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
09-07-2024 17:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
31561484d6051ba02354fa731388cf9e_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
31561484d6051ba02354fa731388cf9e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
31561484d6051ba02354fa731388cf9e_JaffaCakes118.exe
-
Size
212KB
-
MD5
31561484d6051ba02354fa731388cf9e
-
SHA1
e55be1e1f39cbd594d78dfeac19a0af275aa2974
-
SHA256
1800fd9033eb92ccdcd4992bf6ba11ab8f14b5b7d6a8489bc7e91a4c2f96a1ec
-
SHA512
36c1ed071a526070526588c6b1d0cfb8b4e8a878fc6696cb351627fef3f66e332edcda581066047ed6707b4ac8ea4ebcb236ca0d5a05b29110a1134ea5e6f782
-
SSDEEP
6144:U7DLU+iLOoWPmY9Is4TyppQq2d2lhexv6VR/b:u3iOFPmY98tMjexW/b
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
description ioc Process File opened for modification C:\Windows\system\jusched.exe 31561484d6051ba02354fa731388cf9e_JaffaCakes118.exe File opened for modification C:\Windows\system\ctfmon.exe 31561484d6051ba02354fa731388cf9e_JaffaCakes118.exe -
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key 31561484d6051ba02354fa731388cf9e_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" 31561484d6051ba02354fa731388cf9e_JaffaCakes118.exe