Analysis
-
max time kernel
149s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 12:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe
-
Size
24KB
-
MD5
678f10cd022593210e4e0bff5e63d9b3
-
SHA1
29b1c00c5c3fc1700e599d96ed6f8a438ade5b6c
-
SHA256
6a7be0c16911d596fab51a21231d51fe732e0f9f2baaed45da757adcccee3aa1
-
SHA512
31f6a912706112176bb0e45623ae322a2877f82d482539e8056ee1e6fd36fecadf20ebcacdaf6bc7f6dfe16c53ecf626c17e4cf00463a05991fef168f849c53f
-
SSDEEP
192:J9V0LSPYZUaGuTE33+tZqMCE1Gg6I0jgF5JUjHowS1/djVDBG9cEm8x:jiLSPYZz/qvEGbgF5WrowS1/vDBGxm8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2668 678f10cd022593210e4e0bff5e63d9b3_JaffaCakes118.exe