Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 08:09 UTC

General

  • Target

    ea9fddbb29d9fde653f387b782bf42f5_JaffaCakes118.dll

  • Size

    70KB

  • MD5

    ea9fddbb29d9fde653f387b782bf42f5

  • SHA1

    d11525218e35067ccf5d426c01cf323253d29dcf

  • SHA256

    8e2d347213576a7c2f1a398013a62ade61bd001e9d1a1535e33f5fc810344638

  • SHA512

    9399ac830779bcae1d9dd6e7795f65681ab37c9754685e55236ca7188a2e6bdea86048329ce57843c592c40449f4ef78d4cbee7f4bce699a766ad410d2b3a30e

  • SSDEEP

    1536:WrRQtfuQCsB9wSuiRHmIL3eoMLQt1aWgDa2cOf94bMg2BzUT:ykm+GdiRHmI6oM21aFDa3Of9Q2BS

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ea9fddbb29d9fde653f387b782bf42f5_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\ea9fddbb29d9fde653f387b782bf42f5_JaffaCakes118.dll,#1
      2⤵
        PID:2968

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.