Overview

overview

3

Static

static

3

f0ec1c4650...18.exe

windows7-x64

1

f0ec1c4650...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 11:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f0ec1c465026e5fe9cff3350d98894e8_JaffaCakes118.exe

  • Size

    394KB

  • MD5

    f0ec1c465026e5fe9cff3350d98894e8

  • SHA1

    4dfc5ff7134ee07b0e844bbd5b99a2ff94e1fb13

  • SHA256

    15512d8961416a7f26f22096daed725a62b6cace3c57bf851028063010fa97b6

  • SHA512

    bfc003acd326b422d8ca2d40da4a906e1e4b64eb7cef5351e35eee881da8a73857f40d4186b3c385bd718de3c06f65a4cb918cc679f67e47585c387f4ca32f52

  • SSDEEP

    6144:euj7ubtSZyE0M3nbCsZbqCToNFbBeAWs4mWD/ROzIqEsodUhTIX5Uv:Tj7ubIZL32CTWFVXT4m4OJRmUhk6

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f0ec1c465026e5fe9cff3350d98894e8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f0ec1c465026e5fe9cff3350d98894e8_JaffaCakes118.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2512-0-0x0000000000400000-0x0000000000512000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2512-1-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB

    Download

  • memory/2512-2-0x0000000000400000-0x0000000000512000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2512-4-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB

    Download