6350442382b13f95bf179a7156260f0151c16f430280098d936cdbdcece2c899

Analysis

max time kernel
9s
max time network
18s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29/09/2024, 06:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
Size

82KB
MD5

fdf73e8dbea55be50b5900b98b29d1fa
SHA1

6790ba26343163f858c7e2b488e354e66487fcc7
SHA256

6350442382b13f95bf179a7156260f0151c16f430280098d936cdbdcece2c899
SHA512

0015e76657937b9b0822fe728e8162c265857f4d1f781b76b519795bbb3a4e297de9e8f8ffad5f64681c585435a6890563bef16e145f66010cab104645b4758d
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzvCqFl5OphfUFJ:lV2BZVPlFlnxClFvLLcA+sPDz/FrOjf0

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 16 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\UT2004 patch.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\Half-Life 2 + patch.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\Sims 2 + cheat.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\Sims 2(cdfix).exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\Quake3 patch.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\Silent Hill 4 + patch.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\UT2004 patch.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + cheat.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\FlatOut cheat.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\FlatOut cheat.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\Sims 2(nocd).exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Sims 2(nocd).exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 trainer.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\Silent Hill 4 trainer.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File created	C:\Windows\win32dc\Sims 2_serial.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4 + patch.exe	fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fdf73e8dbea55be50b5900b98b29d1fa_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:1848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\FlatOut cheat.exe

Filesize
82KB

MD5
dc1aed02347001cfcdbc5c486dc81da3

SHA1
aac96c73dec89a85150d21fc8a65ff4171e5528b

SHA256
8a5cfa4e96d57dd9b973ab9fc7cdb0f7b9873cccc4f27e1a93353334757e4543

SHA512
39a2a6786fd17fcc55511023bcc33b142853486878e8eff78347e044ede606ae347af9f081b782d21aa9e34696ab0624ab5157edcf89915de1930c8d167401f9

Download Submit
memory/1848-15-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads