Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
20/08/2024, 17:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b02f2407a69e596f6989813df94079ff_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b02f2407a69e596f6989813df94079ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
3 signatures
150 seconds
General
-
Target
b02f2407a69e596f6989813df94079ff_JaffaCakes118.exe
-
Size
37KB
-
MD5
b02f2407a69e596f6989813df94079ff
-
SHA1
4e0d501e1fd419a5b2c3cb2d6110fd6b1a52f3d7
-
SHA256
2e45ad58a75f00b211bccea5dbee3b338908e60181879fb81a5ce617d08e8ad4
-
SHA512
5c85e86645a1fd7f5bbaf8ea52800f240be9d7740a77f679f555a7c747427df69a6beae8f107eb141ca1d416e36e02ea6bd749d9db46e81c1a2b6d99a8ecb1b9
-
SSDEEP
768:XcTa6BK8cVn1iQpkEDwdpO2xhaCBtnXvVn0oIdf:Xc5Ed1iQ+IwPO8aUnfZO
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Windows\CurrentVersion\Run\e4e6edeaeafce0a7ecf1ec = "C:\\Users\\Admin\\ccui.exe" b02f2407a69e596f6989813df94079ff_JaffaCakes118.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2272 b02f2407a69e596f6989813df94079ff_JaffaCakes118.exe