Overview
overview
7Static
static
7079244721c...18.exe
windows7-x64
3079244721c...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
5$PLUGINSDIR/UAC.dll
windows10-2004-x64
5axvlc.dll
windows7-x64
3axvlc.dll
windows10-2004-x64
3libvlc.dll
windows7-x64
3libvlc.dll
windows10-2004-x64
3libvlccore.dll
windows7-x64
3libvlccore.dll
windows10-2004-x64
3npvlc.dll
windows7-x64
3npvlc.dll
windows10-2004-x64
3plugins/3d...in.dll
windows7-x64
3plugins/3d...in.dll
windows10-2004-x64
3plugins/ac...in.dll
windows7-x64
3plugins/ac...in.dll
windows10-2004-x64
3plugins/ac...in.dll
windows7-x64
3plugins/ac...in.dll
windows10-2004-x64
3plugins/ac...in.dll
windows7-x64
3plugins/ac...in.dll
windows10-2004-x64
3plugins/ac...in.dll
windows7-x64
3plugins/ac...in.dll
windows10-2004-x64
3plugins/ac...in.dll
windows7-x64
3plugins/ac...in.dll
windows10-2004-x64
3plugins/ac...in.dll
windows7-x64
3plugins/ac...in.dll
windows10-2004-x64
3plugins/ac...in.dll
windows7-x64
3plugins/ac...in.dll
windows10-2004-x64
3Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
01-10-2024 21:53
Behavioral task
behavioral1
Sample
079244721cabacc7d3bee3cc663b8545_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
079244721cabacc7d3bee3cc663b8545_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
axvlc.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
axvlc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
libvlc.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
libvlc.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral13
Sample
libvlccore.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
libvlccore.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
npvlc.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
npvlc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
plugins/3dnow/libmemcpy3dn_plugin.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
plugins/3dnow/libmemcpy3dn_plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
plugins/access/libaccess_attachment_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
plugins/access/libaccess_attachment_plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
plugins/access/libaccess_bd_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
plugins/access/libaccess_bd_plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
plugins/access/libaccess_ftp_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
plugins/access/libaccess_ftp_plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
plugins/access/libaccess_http_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
plugins/access/libaccess_http_plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
plugins/access/libaccess_imem_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
plugins/access/libaccess_imem_plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
plugins/access/libaccess_mms_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
plugins/access/libaccess_mms_plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
plugins/access/libaccess_rar_plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
plugins/access/libaccess_rar_plugin.dll
Resource
win10v2004-20240802-en
General
-
Target
079244721cabacc7d3bee3cc663b8545_JaffaCakes118.exe
-
Size
20.0MB
-
MD5
079244721cabacc7d3bee3cc663b8545
-
SHA1
152cab0691d77f62a424eeb0e810fd51dde30806
-
SHA256
dc811cc216e3cf694ac24841ea7df9df90175608af5a413070f58f685ecea10a
-
SHA512
26e419d52b7646780bff726cf29fd9d1eea6753a2d3a785ddd45aedc873d856f2ddab1a5932a4d93335a37101a2f24806a7b4711753f6af7b0d3e7429689b82f
-
SSDEEP
393216:XdD7w+gA0nmHcdWkFcLXvBYOuW9e9HMlbyVp+awADd2:Fs+gA2dDSLGzWM9NVp+rOM
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 079244721cabacc7d3bee3cc663b8545_JaffaCakes118.exe