Overview
overview
3Static
static
343e7e96ff4...18.exe
windows7-x64
343e7e96ff4...18.exe
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3UtilDanawaC.exe
windows7-x64
1UtilDanawaC.exe
windows10-2004-x64
1Analysis
-
max time kernel
139s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
14/07/2024, 02:19
Static task
static1
Behavioral task
behavioral1
Sample
43e7e96ff4f66ec1ab7730ec84b6dee8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43e7e96ff4f66ec1ab7730ec84b6dee8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
UtilDanawaC.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
UtilDanawaC.exe
Resource
win10v2004-20240709-en
General
-
Target
43e7e96ff4f66ec1ab7730ec84b6dee8_JaffaCakes118.exe
-
Size
346KB
-
MD5
43e7e96ff4f66ec1ab7730ec84b6dee8
-
SHA1
6c4d4819eb1dd185352e59df10373f02e3d1d43a
-
SHA256
37433c8e92a6ae699ae194d3427b9279fbd2e5004cf62db1675e6bf9f478512e
-
SHA512
72823745f36ab8824b7bee4028c8226a67f9066d237300d3b1c7dacc7ddc354f1fbcdbcf0187a6dd25d39690fbe25fb7546510262821aa6467dc11e15711069e
-
SSDEEP
6144:Te341ISGpIQP08N4PLvFzxEo2HoNqP6jpApKv4zxbDdRtxML713rpz:rhfQPZUxx8HoNJjakv4zVD/G13x
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).