Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 12:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe
-
Size
226KB
-
MD5
34d0ef7f334e970f116ca82574b871e2
-
SHA1
d09d59d63a7792fc7461c5a0a4b9cffc79afe801
-
SHA256
db5cce72d4686b05e7b6abc29ba936316189b32fda7ead89737fa7d16e4ec6f2
-
SHA512
053b52450cd6061d4168a6164797ab67b0d80842ae5b942003c8124e06f05e5c69081077315f145653f0bab77672519687c72c6c5b5d41516f06ce68f2bb8e61
-
SSDEEP
3072:Y+0EBavr1betHt6F+hT/e7zROUzuOxxZAEmZ4g5SZ8Veia7vJMScZUNWB5dk:T0EMvxrC6OU/pm75Sm4f7Yyk9
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Windows\CurrentVersion\Run\Adobe(TM) Update Scheduler = "C:\\Users\\Admin\\AppData\\Local\\Temp\\34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe" 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe 2632 34d0ef7f334e970f116ca82574b871e2_JaffaCakes118.exe