Overview

overview

10

Static

static

10

f287dc5831...18.exe

windows7-x64

1

f287dc5831...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-04-2024 02:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f287dc583114d10662f6d502ec373c63_JaffaCakes118.exe

  • Size

    8.9MB

  • MD5

    f287dc583114d10662f6d502ec373c63

  • SHA1

    f53b7d7c59f7f1c47ab8f16c1ec3441b73a0c620

  • SHA256

    b4a65383de01e677ce9064996550aeb7b9afc3c4da2644a6b56e5b82eb5401fc

  • SHA512

    25ee86cfed1ce10e8023c4045887411998680b8bbe0653002741164859fa83f7c151e95759c0c87ea32baaa93a17113ad47984b89bf4677fc401aa31b0e7643e

  • SSDEEP

    196608:NHY1htnsh+zKsb2V4Py5Ez+NwH6Rv0LGFI/ipUjO9A3qBM7W1YvSZkTe9NKwQn:C5sh+zKsb2V4Py5Ez+NwH6Rv0LGFI/iC

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f287dc583114d10662f6d502ec373c63_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f287dc583114d10662f6d502ec373c63_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2692-0-0x0000000074390000-0x0000000074A7E000-memory.dmp
    Filesize

    6.9MB

    Download
  • memory/2692-1-0x0000000001200000-0x0000000001AE2000-memory.dmp
    Filesize

    8.9MB

    Download
  • memory/2692-2-0x0000000000330000-0x000000000033C000-memory.dmp
    Filesize

    48KB

    Download
  • memory/2692-3-0x0000000000340000-0x000000000034C000-memory.dmp
    Filesize

    48KB

    Download
  • memory/2692-4-0x0000000000350000-0x000000000036E000-memory.dmp
    Filesize

    120KB

    Download
  • memory/2692-5-0x0000000000470000-0x000000000048E000-memory.dmp
    Filesize

    120KB

    Download
  • memory/2692-6-0x00000000004A0000-0x00000000004D0000-memory.dmp
    Filesize

    192KB

    Download
  • memory/2692-7-0x0000000000620000-0x0000000000664000-memory.dmp
    Filesize

    272KB

    Download
  • memory/2692-8-0x00000000005D0000-0x00000000005E0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2692-9-0x0000000000660000-0x0000000000674000-memory.dmp
    Filesize

    80KB

    Download
  • memory/2692-10-0x00000000006C0000-0x00000000006D2000-memory.dmp
    Filesize

    72KB

    Download
  • memory/2692-11-0x0000000000B80000-0x0000000000C06000-memory.dmp
    Filesize

    536KB

    Download
  • memory/2692-12-0x00000000052F0000-0x0000000005330000-memory.dmp
    Filesize

    256KB

    Download
  • memory/2692-13-0x00000000052F0000-0x0000000005330000-memory.dmp
    Filesize

    256KB

    Download
  • memory/2692-14-0x00000000052F0000-0x0000000005330000-memory.dmp
    Filesize

    256KB

    Download
  • memory/2692-15-0x0000000007260000-0x0000000007360000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/2692-17-0x0000000074390000-0x0000000074A7E000-memory.dmp
    Filesize

    6.9MB

    Download
  • memory/2692-18-0x00000000052F0000-0x0000000005330000-memory.dmp
    Filesize

    256KB

    Download