Analysis
-
max time kernel
150s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 06:43
Static task
static1
Behavioral task
behavioral1
Sample
3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe
-
Size
422KB
-
MD5
3c596bd1778678525b11105b15574d7a
-
SHA1
3057b8f0ea02d157a50a1a89bb0d6a07eda62af9
-
SHA256
e3403b6b148058f038ddb2727cc8b5da6094efaeed0dec67634490681da0395e
-
SHA512
ca78acac6e171a19d6087a5a7ac418867b34a3ec8b11bd30aa9875a750f8360cde75efb257605aaeccb55d773a4f364084875851055e0cf435a0f780a7b0406d
-
SSDEEP
12288:lpwqoNP9Pa29NcX/8XmzgC4xfNBOLGmyV4w:AX7aSccvZnOHyyw
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3572-1-0x0000000000400000-0x000000000047A000-memory.dmp upx behavioral2/memory/3572-2-0x0000000000400000-0x0000000000484000-memory.dmp upx behavioral2/memory/3572-4-0x0000000000400000-0x000000000047A000-memory.dmp upx -
Modifies Control Panel 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1750093773-264148664-1320403265-1000\Control Panel\5761b2dc-ce77-4bfa-b965-6f33b1867cf2 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe 3572 3c596bd1778678525b11105b15574d7a_JaffaCakes118.exe