Analysis
- max time kernel
141s - max time network
136s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
12/07/2024, 03:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe
Resource
win7-20240704-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
- Target 3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe
- Size 197KB
- Sample240712-dpslysyejc
- SHA256 6096db3b7948d874998bb8b219f7868c11904d653dc0c98e6bdbbca8c4fd739f
- MD5 3bc8cab90aa55863dece69794cdb811c
- SHA1 977a8fe05f8552e898c41065c05b5aa2b2266046
- SHA512 8bba26057bf065a302e2c406d6625d7a5f96e1e0b17472790bd7c8d47943ec6fdeb056fb0d4ceb8b8a396874a00e1f767855ffadb6cd896d87512bc922ac5385
- SSDEEP 3072:i18z5WKSsjBpiKM3NnXkkVJX/Y2/aIFmMR29yEdv2fOvJJBGeuJvBHrgvW:htWfopBMd0kXXR/lpRChWn/JvI
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe" 3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe" 3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1104 3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe 1104 3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe