17cffae272e3da9c4c1660b9d8a3277972952eef9dc1d8e38cf2e0ef31e66fe9

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 09:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
Size

98KB
MD5

38a96f37522d90e43c3829c1bba63956
SHA1

b1afb731fd027f0b38c1c65bb03ae1a23f37b780
SHA256

17cffae272e3da9c4c1660b9d8a3277972952eef9dc1d8e38cf2e0ef31e66fe9
SHA512

9b629d721c541a59431bdd3e6de00bdc0e4d28a9eed0fc306db6542a7155e002df48b320ebda2e3e7af97890f564c2f0606384d7c8639b371c56d7123dcde5e0
SSDEEP

3072:lV2BZVPlFlnxClFvLLcs+sPDzGvxyjquGm3zMIrh1M:bQrNFxwj9+UGvxuQmDnr3M

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 16 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\FlatOut + cdfix.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\UT2004 + codes.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\Sims 2 + patch.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\UT2004 codes.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\DAoC(cdfix).exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\Counter-Strike codes.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\UT2004 + codes.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\BattleField 1942_cdfix.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\BattleField 1942_nocd.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_nocd.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\UT2004 codes.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\Sims 2_serial.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Sims 2_serial.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\FlatOut + cdfix.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942_cdfix.exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
File created	C:\Windows\win32dc\Quake3(patch).exe	38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\38a96f37522d90e43c3829c1bba63956_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\Counter-Strike codes.exe

Filesize
98KB

MD5
38a96f37522d90e43c3829c1bba63956

SHA1
b1afb731fd027f0b38c1c65bb03ae1a23f37b780

SHA256
17cffae272e3da9c4c1660b9d8a3277972952eef9dc1d8e38cf2e0ef31e66fe9

SHA512
9b629d721c541a59431bdd3e6de00bdc0e4d28a9eed0fc306db6542a7155e002df48b320ebda2e3e7af97890f564c2f0606384d7c8639b371c56d7123dcde5e0

Download Submit
memory/1908-15-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads