Overview

overview

10

Static

static

10

JaffaCakes...a7.exe

windows7-x64

1

JaffaCakes...a7.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    95s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-01-2025 09:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JaffaCakes118_e1464932cefb04d04a81434cf72a6da7.exe

  • Size

    163KB

  • MD5

    e1464932cefb04d04a81434cf72a6da7

  • SHA1

    66f921ca1ef7142d98d91fb61587f9314308a418

  • SHA256

    3c49925f16564b984c0b0f76cff0d581bf770958f0dd5686aff2c6ce747eef2a

  • SHA512

    cfba791cdaff1ba57d400b962fc74f232f48e9b58d24e91afa43c8c7a04008cf32753a0519e7eec7db9944bb0ddbe3a826fcfbeecf862ad7b57b96a092c289de

  • SSDEEP

    3072:7Opq32GadHlFgM1izIWQ5d3Dt+xKrfpL9nX/01H3ue:7rSb6M1iDQ5dzt+xefp9nE

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e1464932cefb04d04a81434cf72a6da7.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e1464932cefb04d04a81434cf72a6da7.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:4052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4052-0-0x0000000001000000-0x000000000134A000-memory.dmp

    Filesize

    3.3MB

    Download