Analysis
-
max time kernel
141s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 05:42
Static task
static1
Behavioral task
behavioral1
Sample
33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe
-
Size
21KB
-
MD5
33834955eb80ee28aa9fe2931d623e84
-
SHA1
2574424bf7368f21169757428fc6162cfc7a1147
-
SHA256
cc630c8ee16a8120e9568e4dabc89ea7b454b8dbf27ef396937c4e87b62d6083
-
SHA512
05f3f1fefd2ce7c072e0e1bd53135d11a915a586e4434778a98bfb3be8937ddabf450d758e4a051432ec41d029fbf43841a29b354bbc822fcf56be33533cf889
-
SSDEEP
384:JL7eRw68dGH1YOgHWZRLf4jm9XFfSvHlYc35X:Z7eRVSGGHMFi7d
Malware Config
Signatures
-
Drops desktop.ini file(s) 2 IoCs
description ioc Process File created C:\copyusb\$RECYCLE.BIN\S-1-5-21-2172136094-3310281978-782691160-1000\desktop.ini 33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe File opened for modification C:\copyusb\$RECYCLE.BIN\S-1-5-21-2172136094-3310281978-782691160-1000\desktop.ini 33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe -
Drops autorun.inf file 1 TTPs 5 IoCs
Malware can abuse Windows Autorun to spread further via attached volumes.
description ioc Process File created C:\autorun.inf 33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe File opened for modification C:\autorun.inf 33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe File created F:\autorun.inf 33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe File opened for modification F:\autorun.inf 33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe File created C:\copyusb\autorun.inf 33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
21KB
MD533834955eb80ee28aa9fe2931d623e84
SHA12574424bf7368f21169757428fc6162cfc7a1147
SHA256cc630c8ee16a8120e9568e4dabc89ea7b454b8dbf27ef396937c4e87b62d6083
SHA51205f3f1fefd2ce7c072e0e1bd53135d11a915a586e4434778a98bfb3be8937ddabf450d758e4a051432ec41d029fbf43841a29b354bbc822fcf56be33533cf889