Overview
overview
7Static
static
3a0cd831fa0...18.exe
windows7-x64
3a0cd831fa0...18.exe
windows10-2004-x64
3$1.exe
windows7-x64
7$1.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...et.dll
windows7-x64
3$PLUGINSDI...et.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$TEMP/repair.exe
windows7-x64
7$TEMP/repair.exe
windows10-2004-x64
7mfc42u.dll
windows7-x64
3mfc42u.dll
windows10-2004-x64
3repair.exe
windows7-x64
7repair.exe
windows10-2004-x64
7Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
17/08/2024, 02:02
Static task
static1
Behavioral task
behavioral1
Sample
a0cd831fa000ba0a177bf0e46dd55402_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0cd831fa000ba0a177bf0e46dd55402_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$1.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/Internet.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/Internet.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$TEMP/repair.exe
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
$TEMP/repair.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
mfc42u.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
mfc42u.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
repair.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
repair.exe
Resource
win10v2004-20240802-en
General
-
Target
a0cd831fa000ba0a177bf0e46dd55402_JaffaCakes118.exe
-
Size
452KB
-
MD5
a0cd831fa000ba0a177bf0e46dd55402
-
SHA1
17a98e2373e22f86a6bf60c32a68c11bd0bb6ad4
-
SHA256
4e60e1b96d82e9d18d8c65595ecb6c839f534ca6d7ce65315552b6e239ab862a
-
SHA512
4389bd1a6f202ac832a2771cd468f50c38e540d04c859e3e0b44f0bde6c0f174baa0747c4e3b1a789198e5c727ab10ee788621853dfb69cd3da39568cf9765af
-
SSDEEP
12288:4uMtulvMJfnAweF70GjENCvDXsKYBThRlSjVM:UQv4o0i5cvLoq
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a0cd831fa000ba0a177bf0e46dd55402_JaffaCakes118.exe