Analysis

  • max time kernel
    140s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-09-2024 19:13

General

  • Target

    ec03abe6088f4b688aa33d2f1e6d86f1_JaffaCakes118.exe

  • Size

    505KB

  • MD5

    ec03abe6088f4b688aa33d2f1e6d86f1

  • SHA1

    aa68246474be0fbe7ed36e9d1fb3bfcaa2351f99

  • SHA256

    95ea0acf4cb17a087ea13a8e8c57db2233cf9fe9ea44a037ed1fae050a47feb6

  • SHA512

    8dffb5c163797ccfd0a0a6486d8710bc3d666aa89d35864f63a57101ae106af05ec4aa19fe48e77f405b9c8384ba927226b1646e581d94992e170cd33b618c39

  • SSDEEP

    12288:Un2EOtxHlyu4CTXCcFnjpCNyTEZ1c2obY7u1R6RMKKvWlp:yatxHhTTXTppqoc61RGMKmWlp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ec03abe6088f4b688aa33d2f1e6d86f1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ec03abe6088f4b688aa33d2f1e6d86f1_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1804-4-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/1804-3-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/1804-2-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/1804-9-0x0000000002AE0000-0x0000000002AE1000-memory.dmp

    Filesize

    4KB

  • memory/1804-8-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/1804-7-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/1804-6-0x0000000000300000-0x0000000000301000-memory.dmp

    Filesize

    4KB

  • memory/1804-5-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/1804-1-0x00000000002A0000-0x00000000002F0000-memory.dmp

    Filesize

    320KB

  • memory/1804-0-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-26-0x0000000001FD0000-0x0000000001FD1000-memory.dmp

    Filesize

    4KB

  • memory/1804-28-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/1804-27-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1804-25-0x0000000002000000-0x0000000002001000-memory.dmp

    Filesize

    4KB

  • memory/1804-24-0x0000000001FF0000-0x0000000001FF1000-memory.dmp

    Filesize

    4KB

  • memory/1804-23-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

    Filesize

    4KB

  • memory/1804-22-0x0000000001FA0000-0x0000000001FA1000-memory.dmp

    Filesize

    4KB

  • memory/1804-21-0x0000000001FB0000-0x0000000001FB1000-memory.dmp

    Filesize

    4KB

  • memory/1804-20-0x0000000000600000-0x0000000000601000-memory.dmp

    Filesize

    4KB

  • memory/1804-19-0x0000000000640000-0x0000000000641000-memory.dmp

    Filesize

    4KB

  • memory/1804-18-0x0000000000680000-0x0000000000681000-memory.dmp

    Filesize

    4KB

  • memory/1804-17-0x0000000000630000-0x0000000000631000-memory.dmp

    Filesize

    4KB

  • memory/1804-16-0x0000000000620000-0x0000000000621000-memory.dmp

    Filesize

    4KB

  • memory/1804-15-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/1804-14-0x00000000003F0000-0x00000000003F1000-memory.dmp

    Filesize

    4KB

  • memory/1804-13-0x0000000000670000-0x0000000000671000-memory.dmp

    Filesize

    4KB

  • memory/1804-12-0x0000000002AD0000-0x0000000002AD1000-memory.dmp

    Filesize

    4KB

  • memory/1804-11-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/1804-10-0x0000000002AE0000-0x0000000002AE1000-memory.dmp

    Filesize

    4KB

  • memory/1804-29-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-30-0x00000000002A0000-0x00000000002F0000-memory.dmp

    Filesize

    320KB

  • memory/1804-31-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-32-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-33-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-34-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-35-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-36-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-37-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-38-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-39-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-40-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-41-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-42-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-43-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB

  • memory/1804-44-0x0000000000400000-0x00000000004F4000-memory.dmp

    Filesize

    976KB