Analysis
-
max time kernel
141s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
-
submitted
11/04/2024, 00:03
General
-
Target
ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe
-
Size
22KB
-
MD5
ec45673b4568f927134678187fc83b0c
-
SHA1
851052080624c41f5b18145f711a7885ee53f838
-
SHA256
03fdc2107556751b3cf44c2f8f29a123f075d46340313cf075ec53f3d8bc1fb1
-
SHA512
3c0fb1b33f5dfb5a106e6839300100560a61b9793b45376a6e137ebb8ac8e6d340ecb2e27e433847edf100a1b2a4517a550efe3be64363aa604070812d949c68
-
SSDEEP
384:MAwW9E7VnZc0wj610iCMOWOn/Ze7O9WlJsEwygJUjJmSF1QCElzPO+cBcU/:8Wi5nZGMcDfn/YbLQAE8+c
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ec45673b4568f927134678187fc83b0c_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19KB
MD505a551774d34b16c2562b9bb1a3f3064
SHA1acb1cb1130183e3bdab28ad2717228881ca93924
SHA25635ecb04de6d61917f1c2c4e333f47ca23e2c5b7bb22ba525d230ebc7d136d869
SHA512f9599fed5e176f44ccfdb7a7556cfe0787a9caaf4d691fe8b1a5a582a1de4a4313ec59c4c0bb0da4ab7cf27c783a8906eb75a6476fb87d5bd812b5456ca054ad
-
Filesize
104KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
104KB