Overview
overview
7Static
static
361edc88704...18.exe
windows7-x64
361edc88704...18.exe
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PROGRAM_F...ll.exe
windows7-x64
7$PROGRAM_F...ll.exe
windows10-2004-x64
7decsysswn.exe
windows7-x64
1decsysswn.exe
windows10-2004-x64
1imex.bat
windows7-x64
7imex.bat
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
21/07/2024, 23:49
Static task
static1
Behavioral task
behavioral1
Sample
61edc887048762bc065766ecc60a7586_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61edc887048762bc065766ecc60a7586_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PROGRAM_FILES/$0/Uninstall.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PROGRAM_FILES/$0/Uninstall.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
decsysswn.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
decsysswn.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
imex.bat
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
imex.bat
Resource
win10v2004-20240709-en
General
-
Target
61edc887048762bc065766ecc60a7586_JaffaCakes118.exe
-
Size
110KB
-
MD5
61edc887048762bc065766ecc60a7586
-
SHA1
1a7de1aecd490ab5e3f091874a34794aa6c78368
-
SHA256
d631cd2bbb54ea8415f89028cea9e0a6b41ba1991b0209eec896e791b2e158c8
-
SHA512
d66d95dfa402500ff93b9cba15c52fb4a0dfbfdd0ccc726292cfc70d01b6c63541f151fb990cc0f8cbc82bae94ae73288245b21adcbfc23879f86f54a6a47619
-
SSDEEP
3072:LizjyRDxUhKAfckJp8sBM3O+yVjI3EFGFqIZjsnm3:mjyRDxUhYW8sBMhyVjI0EqPm3
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).