Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
11/08/2024, 11:56
Static task
static1
Behavioral task
behavioral1
Sample
8a453820f58837bd514f9e3945280107_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a453820f58837bd514f9e3945280107_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a453820f58837bd514f9e3945280107_JaffaCakes118.exe
-
Size
147KB
-
MD5
8a453820f58837bd514f9e3945280107
-
SHA1
7183dbe37b9624e62189e140cf878785aa4ec880
-
SHA256
81d608adbbc89e1aefb35f6939c143f6b5c90f5057d09f73992f49db98d0e511
-
SHA512
20720de32dc11361395c6699aabd3c8dcef370938f20c09f2a04965a6014471e087aa3fbd5a89699d58f820dd2a7779ae1e03dd62cc4ba7b62916759ade5d2ea
-
SSDEEP
3072:muaWJ5rAYUsNlephUVZIjf2Zg3Vp1Ye+/KdgQ4P:Z5rA1ilehUErmP
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 3016 8a453820f58837bd514f9e3945280107_JaffaCakes118.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\BASSMOD.dll 8a453820f58837bd514f9e3945280107_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8a453820f58837bd514f9e3945280107_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5f50b8a4c009af0bc9acd5fc358ea4221
SHA155c457bde5d5e3c0a939f93a2a0086cd172df427
SHA256cea123f206cc17363fb50fb7c064de1acaa55a9307c01e07709e8d95bb15c6c0
SHA5129f4ba1df50724bbf081766d01e7a2ae0d85173f342a8050c99e4df07994f3f62776d234d51c27a06ab51ae2e7fdbcd9e67ff908d0794ea07d283510d18ae8ff3