Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240319-en -
resource tags
-
submitted
06-04-2024 13:11
General
-
Target
e29dff51d78952d9ee34fb5c93779cc4_JaffaCakes118.exe
-
Size
105KB
-
MD5
e29dff51d78952d9ee34fb5c93779cc4
-
SHA1
9ffd3e7c23c12a51cfdcbea7edd21a7355206378
-
SHA256
2eabc02a0e4281b0fed74bb03eae06d9c002af897d112503a8dd29735674b174
-
SHA512
9f9f2493a0d2ae22dcb81682e33f438cebfbfaf170862bc159d2f805f937a707b25156461c2118d5f45c3febcfb30d8388934a31a2cd627b8bbd656fbe309efe
-
SSDEEP
1536:7IqlamQH5MbkqyQLP1trgNYHuiHCj/XKwFf5r0e:L9K09ABKwFfB0e
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e29dff51d78952d9ee34fb5c93779cc4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e29dff51d78952d9ee34fb5c93779cc4_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1780 --field-trial-handle=2000,i,9877262470271371196,11878025205711850266,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
55KB
MD551dcf3645714836efe2044ecd0f4271d
SHA1baeae8c103089571af23861ea336a74d807921ed
SHA256be856ce7307dbf901e128fc89b3c21dffc80c99bfc0618c0b99de7aaa78919a4
SHA5125fce34bb5fcc74fa59a9fe0f4aa130da65eb2b0496c047777120ba307c5c641753b600debdaea0c6259cbd9424063bf31f0217b7000a3bc89727b5056be20e40
-
Filesize
112KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
112KB
-
Filesize
72KB