Analysis
-
max time kernel
94s -
max time network
110s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10/07/2024, 11:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe
-
Size
1008KB
-
MD5
349ad9bfacbef43d8116b714ba54b3eb
-
SHA1
883f4d26eba5fe7df3fbf694196da8c249e235ec
-
SHA256
d1087c0fb888aaf75a07103e9b0d48d1c0d2c979424928426db97e365073d7fc
-
SHA512
44a979eeb49bdb0818fe7dbcc2120969e7a38ee06f66ee9e1958bb4167d1ac14bfe7f2604f89ea0dc446c21662b18f5c300d8296c09541b725d88cc25827f56d
-
SSDEEP
768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4v:tjrAX5NjJHJ+oFE2M/4v
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\WinAmp skings and plugins.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Download.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\BsPlayer v3.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Silent Hill.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\PSEmu.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\humor.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Chenoa en cueros.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Hacha Profesional Edition.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Basic 6.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual C.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\a pelo.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\WinZip 9.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Puta come mierda.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\RealOne Player (Full version).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Solo para Maricas.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\No lo Descargues.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Touch.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Studio (full).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Sexo con una menor.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Movie Maker.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\RM2GBA.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\mugen (full).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\GBAEmu.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\WAV2MP3.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\GameCube Emulator.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\VMIntel386.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe 349ad9bfacbef43d8116b714ba54b3eb_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.8MB
MD5957f3b5e74b7fab625ccb9f8c1a8a286
SHA183fbb1a250d504a18b035b3cdc0e5c3d53be2a67
SHA25681497590ba74630eeef13143c89b46a0783e0893d6019f73f2b6d4d7a57d3f89
SHA512deece8537d4a6c95f4ba30467e32f1e986197df9f4d382fcc7a30b751232d5c2d0dfa30c4a35d37c4e8100d7d5b8ba4a4d757d59f87aef18c3919b08190acec7