Analysis

  • max time kernel
    146s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06-04-2024 05:38

General

  • Target

    dc9b346b7523cc613b4520791695ecee_JaffaCakes118.exe

  • Size

    469KB

  • MD5

    dc9b346b7523cc613b4520791695ecee

  • SHA1

    b574d662a2d78fa7dcc093fd4cfee7082ff4c3e1

  • SHA256

    c9e80d6ad9f0760e7ec83eff06eb9c583133812d07a71c7d8037212fd675a52f

  • SHA512

    6efaf82ad6950490df7c975504d0018e97f4b565b0ce6baf7cc853f83a5c3e4b44e711fcdb38d6a06a8a0f77a15c9cf9db1ef3d7074e077c014140a107f707ff

  • SSDEEP

    12288:RIbnq5ORFftIiB6gBFvST9kFO14SFoktWEY+ucXz+J6nJELcUmQ+75:RIbq0ft8gLvoko1hmkQ5cXzyvL/o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 30 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dc9b346b7523cc613b4520791695ecee_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\dc9b346b7523cc613b4520791695ecee_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1404-0-0x0000000000400000-0x0000000000596000-memory.dmp

    Filesize

    1.6MB

  • memory/1404-1-0x0000000000400000-0x0000000000596000-memory.dmp

    Filesize

    1.6MB

  • memory/1404-2-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1404-3-0x0000000000400000-0x0000000000596000-memory.dmp

    Filesize

    1.6MB

  • memory/1404-5-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1404-8-0x0000000000400000-0x0000000000596000-memory.dmp

    Filesize

    1.6MB