Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
15/04/2024, 08:29
General
-
Target
f0a96993b0ae1259a36522d3f9155027_JaffaCakes118.exe
-
Size
82KB
-
MD5
f0a96993b0ae1259a36522d3f9155027
-
SHA1
3a9ae3843bdd3c5b16f2c4d837ad1de10e6088e6
-
SHA256
37a9a943fccc6e49d36741925a1c931fbbf7b2eb8c3a332e2f27f13f02ba4cc5
-
SHA512
1b71b9ddb15d4a5be804d9b54b9e94d93f0fd2167e139da802675ab10083f93545efa728d35476a0a6d04616bb9cceea350e1398fe7afda1ada76dc65e623541
-
SSDEEP
1536:PVqSRMecvADEZQOFzm3fbclW6fAzqvaBhmVRV+5N6OYNwO:P9+AoZQkS4QuJ2kRWNFYl
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f0a96993b0ae1259a36522d3f9155027_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f0a96993b0ae1259a36522d3f9155027_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f0a96993b0ae1259a36522d3f9155027_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f0a96993b0ae1259a36522d3f9155027_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1340 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5fdd538eba9e68a451276ac4f2a8236d7
SHA1ccd39ceaa8dbecb5d4c4fda00848b156802d5ea6
SHA256341f14a388c8a7a18858ec419128af9db138979241d0b79bdd489f2f9176f848
SHA51291914ed27e66a4d22f14a90448e3485e1fd0b27cd80b5cc454776c70bc7fde09622ff3dc5efdcedbf7e31f0a4e03c7867aa4cb29aaab7034ea13daabfec67dec
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB