Overview

overview

10

Static

static

10

JaffaCakes...e0.exe

windows7-x64

1

JaffaCakes...e0.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-12-2024 14:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JaffaCakes118_e2b09cc89c5011e92f97c339d3d7f30bb0de9f38e49eedb669f56a9efcc6dde0.exe

  • Size

    188KB

  • MD5

    18e5f9bd705743009e3f7d5022f1352a

  • SHA1

    3a41cff37ab95e267ae4e09050244ade8067e029

  • SHA256

    e2b09cc89c5011e92f97c339d3d7f30bb0de9f38e49eedb669f56a9efcc6dde0

  • SHA512

    3f98d68029018b05cd0b459a8998163ce6f64530e1783a0d680f4681198285c8d18d887b99539d9e2d1eabb0a2c55a9bb895192bee98c10490dcbe6354aca5b9

  • SSDEEP

    3072:4qf/pFqbF/wWd0118342ZqthB+rqFpVqjv82cMb7J4vkabVfAZ:caA34aqtyrqFpVqbkQ7JGxVfAZ

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2b09cc89c5011e92f97c339d3d7f30bb0de9f38e49eedb669f56a9efcc6dde0.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2b09cc89c5011e92f97c339d3d7f30bb0de9f38e49eedb669f56a9efcc6dde0.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:1936

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1936-0-0x0000000000D40000-0x000000000108A000-memory.dmp

    Filesize

    3.3MB

    Download