Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09/10/2024, 08:38
Behavioral task
behavioral1
Sample
2e0c47cbdbaf97634010eb075eed6274_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e0c47cbdbaf97634010eb075eed6274_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e0c47cbdbaf97634010eb075eed6274_JaffaCakes118.exe
-
Size
87KB
-
MD5
2e0c47cbdbaf97634010eb075eed6274
-
SHA1
22c1929de3f007be4cda8a0cb60a4cb90dffbbf2
-
SHA256
f6ed3baea7e059bfd371bcec4d60cea12dca898359298887730f2c2879dbed83
-
SHA512
c5e1714da983b95c3ce12afb033d4decef86bcbb33b6d7b7f3b5d7190ac51a527d812bdce36ccc61e9bb498d48db9fd177d96aacbae334ab9754bcd79d435738
-
SSDEEP
1536:wbY+bmzUqxc4fK4tGDDE8WgDcqC6NjfrSxMtiNfd30s3gMzhWJVM4ssDZrvg/sP:QYzUMfxuNWHqvhr9Ufd30LDfK/sP
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Windows\CurrentVersion\Run\MSFox = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2e0c47cbdbaf97634010eb075eed6274_JaffaCakes118.exe" 2e0c47cbdbaf97634010eb075eed6274_JaffaCakes118.exe -
resource yara_rule behavioral1/memory/2904-0-0x0000000000400000-0x0000000000436000-memory.dmp upx behavioral1/memory/2904-3-0x0000000000400000-0x0000000000436000-memory.dmp upx behavioral1/memory/2904-5-0x0000000000400000-0x0000000000436000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2e0c47cbdbaf97634010eb075eed6274_JaffaCakes118.exe