Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11-07-2024 22:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3ae0a7ef7c5c77446df2f70db751f8e6_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3ae0a7ef7c5c77446df2f70db751f8e6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
3ae0a7ef7c5c77446df2f70db751f8e6_JaffaCakes118.exe
-
Size
228KB
-
MD5
3ae0a7ef7c5c77446df2f70db751f8e6
-
SHA1
7b7df6907a9934dbb12e6c46460a5410b8d22d10
-
SHA256
87bc05e29847d4a56eed83fb56cecb51f9b853ecbb2cf0468a6dec2435c1ff12
-
SHA512
4fa5dc88e8718afe9faccf4d4a9c21aa90ad063ba21899bc653754ef8bb34188a6e095ae450c40f8f857c0c178d0f3af0dd533704d90298732413cf444f40ff2
-
SSDEEP
384:OTAR1Nwwwx95s50u905eBqP44n7PtMma0pQiGDRfvi:OTAR1YHXLtMma0pyVi
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\lsass.exe = "C:\\Windows\\lsass.exe" 3ae0a7ef7c5c77446df2f70db751f8e6_JaffaCakes118.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\lsass.exe 3ae0a7ef7c5c77446df2f70db751f8e6_JaffaCakes118.exe File opened for modification C:\Windows\lsass.exe 3ae0a7ef7c5c77446df2f70db751f8e6_JaffaCakes118.exe