Analysis

  • max time kernel
    140s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    22-08-2024 15:25

General

  • Target

    b826e8cd5e20ae1e95f79da7bb4583fa_JaffaCakes118.exe

  • Size

    1.6MB

  • MD5

    b826e8cd5e20ae1e95f79da7bb4583fa

  • SHA1

    4f2a7870a0ea57cbd59d784bff1ad6879e76c82d

  • SHA256

    cc5b9afdc6cc37bc77c98d6241b873a90746f77fa89e622712c22a38a3a9d2b6

  • SHA512

    9b5808eae11c33e4db7a6c0fa9a08b12cf3c62b0f691f02f6ed32d4062be931ab6fe660be476b1b89051b2d4c50258079ab5806e09dd5c84d1cc5e7c31a6cb8f

  • SSDEEP

    24576:rKaMmqdsMQaYI21S+vvMb4ERRJ7+rpfsyIDimS19uvK7K/cRgOnmq9g6VKnz:LD91I21TvvMbvAd6DimBPcOU7m6Iz

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b826e8cd5e20ae1e95f79da7bb4583fa_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b826e8cd5e20ae1e95f79da7bb4583fa_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2336

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2336-9-0x0000000002030000-0x0000000002090000-memory.dmp

    Filesize

    384KB

  • memory/2336-8-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-7-0x0000000002280000-0x0000000002281000-memory.dmp

    Filesize

    4KB

  • memory/2336-6-0x0000000000880000-0x0000000000881000-memory.dmp

    Filesize

    4KB

  • memory/2336-5-0x0000000002290000-0x0000000002291000-memory.dmp

    Filesize

    4KB

  • memory/2336-4-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2336-3-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

    Filesize

    4KB

  • memory/2336-2-0x00000000003F0000-0x00000000003F1000-memory.dmp

    Filesize

    4KB

  • memory/2336-1-0x0000000000860000-0x0000000000861000-memory.dmp

    Filesize

    4KB

  • memory/2336-0-0x0000000000400000-0x000000000085C000-memory.dmp

    Filesize

    4.4MB

  • memory/2336-10-0x0000000001FD0000-0x0000000001FD1000-memory.dmp

    Filesize

    4KB

  • memory/2336-17-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-16-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-15-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-14-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-13-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-12-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-11-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-18-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-19-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-20-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-21-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-22-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-23-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-24-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-25-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-26-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/2336-27-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/2336-28-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/2336-29-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/2336-30-0x00000000022D0000-0x00000000022D1000-memory.dmp

    Filesize

    4KB

  • memory/2336-31-0x00000000022C0000-0x00000000022C1000-memory.dmp

    Filesize

    4KB

  • memory/2336-32-0x0000000002630000-0x0000000002631000-memory.dmp

    Filesize

    4KB

  • memory/2336-33-0x0000000002600000-0x0000000002601000-memory.dmp

    Filesize

    4KB

  • memory/2336-34-0x00000000022B0000-0x00000000022B1000-memory.dmp

    Filesize

    4KB

  • memory/2336-42-0x00000000022E0000-0x00000000022E1000-memory.dmp

    Filesize

    4KB

  • memory/2336-41-0x00000000026D0000-0x00000000026D1000-memory.dmp

    Filesize

    4KB

  • memory/2336-40-0x00000000026B0000-0x00000000026B1000-memory.dmp

    Filesize

    4KB

  • memory/2336-39-0x0000000002670000-0x0000000002671000-memory.dmp

    Filesize

    4KB

  • memory/2336-38-0x00000000026E0000-0x00000000026E1000-memory.dmp

    Filesize

    4KB

  • memory/2336-37-0x0000000002680000-0x0000000002681000-memory.dmp

    Filesize

    4KB

  • memory/2336-36-0x0000000002690000-0x0000000002691000-memory.dmp

    Filesize

    4KB

  • memory/2336-35-0x0000000002640000-0x0000000002641000-memory.dmp

    Filesize

    4KB

  • memory/2336-45-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2336-44-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2336-43-0x00000000034F0000-0x00000000034F2000-memory.dmp

    Filesize

    8KB

  • memory/2336-46-0x0000000000400000-0x000000000085C000-memory.dmp

    Filesize

    4.4MB

  • memory/2336-47-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/2336-48-0x0000000002030000-0x0000000002090000-memory.dmp

    Filesize

    384KB

  • memory/2336-49-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB