Analysis
-
max time kernel
91s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
09-07-2024 19:42
Static task
static1
Behavioral task
behavioral1
Sample
31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe
-
Size
4.6MB
-
MD5
31b76ef1ebf7cec0ed4c90fdf13ea565
-
SHA1
0440303d8099dfdbd0077adcf19f7bb102241ccf
-
SHA256
d233688bd3113d4cdbb025efbbbf1ca88c52050d30ea26919e6141a4b315f5ba
-
SHA512
b2aa774600cde4cf4fe6ff94b2deddbb4d11e174bcc073ae5b013a16cf9fff957f29a0d8ed35e906ad51a9d6b8539dda67c6eb644c7bf60e4b16b7f41003789d
-
SSDEEP
3072:GVXoCYyTvwKA6P1feZ7xbaEyjqii7eKszxOYqem71zZO6YRoyXJHa27m5QVkOwKG:+7wJUSlyjFi7ehxkem713ylaum0wJQ
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch 31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe Set value (str) \REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" 31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Software\Microsoft\Internet Explorer\IESettingSync 31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe Set value (int) \REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "2" 31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3212 31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe 3212 31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe 3212 31b76ef1ebf7cec0ed4c90fdf13ea565_JaffaCakes118.exe