Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
13-07-2024 04:09
Static task
static1
Behavioral task
behavioral1
Sample
4023d74cb09ef3a231eed22c152eeaca_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4023d74cb09ef3a231eed22c152eeaca_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4023d74cb09ef3a231eed22c152eeaca_JaffaCakes118.exe
-
Size
1.6MB
-
MD5
4023d74cb09ef3a231eed22c152eeaca
-
SHA1
35f2c9811f10e4a130dd9af06f35bce1f3aee990
-
SHA256
49057c86054bcacd55ba65be489c5448507adbe6e764176494b3804dd79384ad
-
SHA512
6eb022674ee26afed8e6f792280c942c7fdcdcf70ad61d0c9d94611529566ed23c8c2321f3007fcb3e8102c12d05ed8c75baf059e169a7218bbcdc6612e4a81d
-
SSDEEP
24576:aZn77XjvfoQY1MT28++XHITb6fcPVGsf/sZ6k8k6Y3kM:wnj3iu28XAbtNsOfNM
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2704 4023d74cb09ef3a231eed22c152eeaca_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2704 4023d74cb09ef3a231eed22c152eeaca_JaffaCakes118.exe