Overview
overview
8Static
static
3JaffaCakes...38.exe
windows10-2004-x64
7JaffaCakes...38.exe
windows11-21h2-x64
7$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ol.dll
windows11-21h2-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...re.dll
windows10-2004-x64
3$PLUGINSDI...re.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ip.dll
windows10-2004-x64
3$PLUGINSDI...ip.dll
windows11-21h2-x64
3$TEMP/msvcp100.dll
windows10-2004-x64
3$TEMP/msvcp100.dll
windows11-21h2-x64
3$TEMP/msvcr100.dll
windows10-2004-x64
3$TEMP/msvcr100.dll
windows11-21h2-x64
3$TEMP/op.exe
windows10-2004-x64
8$TEMP/op.exe
windows11-21h2-x64
7$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows11-21h2-x64
3$WINDIR/Sy...00.dll
windows10-2004-x64
3$WINDIR/Sy...00.dll
windows11-21h2-x64
3$WINDIR/Sy...00.dll
windows10-2004-x64
3$WINDIR/Sy...00.dll
windows11-21h2-x64
3Analysis
-
max time kernel
100s -
max time network
105s -
platform
windows11-21h2_x64 -
resource
win11-20250610-en -
resource tags
arch:x64arch:x86image:win11-20250610-enlocale:en-usos:windows11-21h2-x64system -
submitted
04/07/2025, 17:56
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe
Resource
win10v2004-20250502-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe
Resource
win11-20250610-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11-20250619-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/BrowserInfo.dll
Resource
win10v2004-20250610-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/BrowserInfo.dll
Resource
win11-20250610-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win11-20250619-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20250610-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSISpcre.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSISpcre.dll
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win11-20250610-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/inetc.dll
Resource
win11-20250610-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20250610-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20250619-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsUnzip.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsUnzip.dll
Resource
win11-20250610-en
Behavioral task
behavioral21
Sample
$TEMP/msvcp100.dll
Resource
win10v2004-20250610-en
Behavioral task
behavioral22
Sample
$TEMP/msvcp100.dll
Resource
win11-20250619-en
Behavioral task
behavioral23
Sample
$TEMP/msvcr100.dll
Resource
win10v2004-20250610-en
Behavioral task
behavioral24
Sample
$TEMP/msvcr100.dll
Resource
win11-20250619-en
Behavioral task
behavioral25
Sample
$TEMP/op.exe
Resource
win10v2004-20250610-en
Behavioral task
behavioral26
Sample
$TEMP/op.exe
Resource
win11-20250619-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/inetc.dll
Resource
win11-20250619-en
Behavioral task
behavioral29
Sample
$WINDIR/System32/msvcp100.dll
Resource
win10v2004-20250610-en
Behavioral task
behavioral30
Sample
$WINDIR/System32/msvcp100.dll
Resource
win11-20250610-en
Behavioral task
behavioral31
Sample
$WINDIR/System32/msvcr100.dll
Resource
win10v2004-20250610-en
Behavioral task
behavioral32
Sample
$WINDIR/System32/msvcr100.dll
Resource
win11-20250610-en
General
-
Target
JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe
-
Size
18.6MB
-
MD5
1c752cb2457cc6ae008107a07b440e38
-
SHA1
94697a2c0fcbecf11dda0212fe32a21f288f0978
-
SHA256
62626c0f30cbb661ed1a8293b886783febd64bafc163536ff3f16b9ab62ff3b9
-
SHA512
f2190dbdda2e67d8ea774e079320c67bf9a6cddc647c1cf437b6ea19aa8238ca52a5cb632032b9936383eb09970daa67b61600c413e99db1026cf9484cd1d802
-
SSDEEP
393216:bI1phJ2jcWxzTagKuXh/JGr7jZ1tFFwLY90qY3wRmTabd4:bWhJWcWxz+aXRJyBz+U
Malware Config
Signatures
-
Loads dropped DLL 13 IoCs
pid Process 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe 2080 JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_1c752cb2457cc6ae008107a07b440e38.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD5410a586735f45164c86bda363ad8446f
SHA1a68d18a8c72ffaa8f8d9ed9f76ea9b0ed397821b
SHA256b15b1fc88d1b56088b2d3738d76772a91fa186a316a3e0a154358820d0fb9005
SHA512d12083f67df132b2be57c202601a0cf82dba4c234910e780d2723aac14ae68407b824405b04737b55104bc97750550a3271a944d647661b067ce134075e6cc2a
-
Filesize
133KB
MD5414124231a0e8a71a820b2c39513c7d7
SHA18b08717c2c6305a327598f663b17cc5cd60eaefa
SHA2561be9ee2ae3b05441f08987d4ffc4dd8219b020c4c44b6df023c3c259d1da305b
SHA512eab202f56aafb1b4330621bbbdafafc55330ed35216e77c55e882d9057d11e4703eddb8815750ea7c80de7309b0bf12e5ef1a9eb7ddf7624b1b268170a50f2de
-
Filesize
11KB
MD5959ea64598b9a3e494c00e8fa793be7e
SHA140f284a3b92c2f04b1038def79579d4b3d066ee0
SHA25603cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
SHA5125e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64
-
Filesize
58KB
MD534aafdcc9ba1a2acc6d6fe9ca347ac7b
SHA123a4f3ea483d8643d427b29ed92af8253c0d3e6b
SHA256baf9f333f6276ed10cd1c29c619d1e9143e9b751c5a043d8212567333d0aa9cd
SHA5121ded039235005fc6ea3bdbaac2e4d74892188e089d95ddca1486a1c83dba1b67eca72b3e1318adf3d8753a0f3fe805c6df46f9e6f1fef44bc1f469a93f6466f5
-
Filesize
9KB
MD5f7b92b78f1a00a872c8a38f40afa7d65
SHA1872522498f69ad49270190c74cf3af28862057f2
SHA2562bee549b2816ba29f81c47778d9e299c3a364b81769e43d5255310c2bd146d6e
SHA5123ad6afa6269b48f238b48cf09eeefdef03b58bab4e25282c8c2887b4509856cf5cbb0223fbb06c822fb745aeea000dd1eee878df46ad0ba7f2ef520a7a607f79
-
Filesize
178KB
MD5bde32fc5dcc9d98520c95fc23fa7bc92
SHA1e81891aa3f6e500c33474c21ff324083cbb50fcd
SHA2561fa8f2dfbe9fb83c0660e25e193e5aa09e1d4cd4af4f62e056b2930eb595c4c9
SHA51299b8d5671fe0a6d6b3a660fd94cef91a69f20863bff2faaae686a673c15789d3d52dbc44c9699fa90f13f4af7d1bfb40c6449d73f608d9c6b5c1fffbf29383b3