Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
11-08-2024 15:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe
-
Size
68KB
-
MD5
8b00a7743f1a807b31e4f224470fae17
-
SHA1
25562c6c3dd91c3c8aa2962a3792c147760a5cca
-
SHA256
e4361180237ce3ca574155c670a366b55f4ab6977feaee4bf62011d3c4f1a199
-
SHA512
aaeb05a0904eecc01b5cbd97229dd2b9b8b161b721e932c83ac37a79abb2daa33dcd51bb12a87fec35f371d78fd9341e42abc0a1e6d4972c283b3611e83c5c6a
-
SSDEEP
1536:cbNvjdIwJV1stthcr2dTLSft2+ttZe3BtToi8co:8NWwJV467fFextToJco
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 3 IoCs
description ioc Process File opened for modification \??\c:\windows\SysWOW64\8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe 8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe File created \??\c:\windows\SysWOW64\8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.dll 8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe File created \??\c:\windows\SysWOW64\8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe 8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3048 8b00a7743f1a807b31e4f224470fae17_JaffaCakes118.exe