Analysis
-
max time kernel
13s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
20-08-2024 22:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
b110f6ac01483ac1ad205f8ec5706b93
-
SHA1
02cb170d33bb69ec72775c6d896158d8bed23012
-
SHA256
c74edd18d3c9087ed48635e012fd46a4f09d4d4541ec9a9769370b0b8c70dc0f
-
SHA512
b0fec95ac941b990ee7da8745c948a34a78062213cf2c6a1419ea3cd7395dbb966bae1ff64fa4eeae096a4e6d2e2fd31275b577a57e4877bfc61758bace399e9
-
SSDEEP
768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/49:tjrAX5NjJHJ+oFE2M/49
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\BsPlayer v3.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Solo para Maricas.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Basic 6.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual C.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Touch.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Hacha Profesional Edition.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\GBAEmu.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\GameCube Emulator.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Sexo con una menor.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\WAV2MP3.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Visual Studio (full).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\3D Movie Maker.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\humor.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\a pelo.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Silent Hill.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\No lo Descargues.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Chenoa en cueros.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\VMIntel386.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\WinAmp skings and plugins.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\RealOne Player (Full version).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\WinZip 9.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Dont Download.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\RM2GBA.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\PSEmu.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\mugen (full).exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Puta come mierda.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b110f6ac01483ac1ad205f8ec5706b93_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
MD5c7254544ead8630e0f76ed3da9c30590
SHA1550ec5e629aab2135db266572725abe83aff8a62
SHA2569f1531e93b1d9c7bcdf296e6487987b5397a4084f0020d3aa44faea0f6075f32
SHA512f75f81bc56911abd3db2789ce566f8fdf7a937a78c5138d918b1ff21b4a738ccb54fa99c0a7fdb4452e64dc954b871eb8a9b628f7dac22cc0b4f9c295996f9c6